"JR" == Jaroslaw Rafa <r...@rafa.eu.org> writes:
JR> Dnia 13.08.2022 o godz. 11:22:30 Durga Prasad Malyala pisze:
Did you try fail2ban. It is very good.
JR> I already use fail2ban, but I could not use it in this case, as the AUTH
JR> attempts were from different IP addresses and almost no address did
JR> repeat. So fail2ban would not do anything.
On 13.08.22 16:23, tog...@dinamizm.com wrote:
Have you looked spamhaus or abusix for auth blacklists. They both do a decent
job
in blocking auth attempts from nasty IP addresses in my case.
I have noticed this kind of attacks too with the same problem - ona IP
rarely repeats more than once.
I'm not sure if spamhaus or any other dnsbl processes this kind of attacks
quickly enough so we could stop them.
however, if anyone tries this, let us know...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a teepee: no Windows, no Gates and an apache inside...
