which gathers information on botnets is good. This looks like a possible case for log parsing and fail2ban. But I bet we usually
All good comments. Thank you. Log parsing: exactly, but how do I log it? (Answer from elsewhere in this topic is that I don't, in this case.) fail2ban: instead, I went with swatchd -> nftables -> set elements with timeouts - James
