re: Hello, Worm!: Mapping SSH probes with a bash script VIEW POST

TOP OF THREAD FULL DISCUSSION
re: +1 for fail2ban! Works like a charm. I've added ip-set to it lately and this has helped to reduce load significantly.
 

Yeah. ip-set rules are great for ensuring across-boot persistence, too.

One of these days, I'll get around to integrating my deployment-configuration with a "phone home" hook that informs the configuration service, "when re-provisioning this host or provisioning new hosts, blacklist these IPs".

code of conduct - report abuse