On top of fail2ban, I use ufw-blocklist [1]. It's essentially a cron job that pulls from IPSum [2], a list of spam / malicious IPs updated every day. It automatically blocks any traffic coming from those IP addresses. I had nearly 1000+ fail attempts a day on my VPS, which around 100-200 banned at any time. After installing ufw-blocklist, it's less than 10 fail attempts a day.
[1] https://github.com/poddmo/ufw-blocklist [2] https://github.com/stamparm/ipsum
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。