This is just the 1000 last lines of my nginx log
What are you using to view this? Nushell?
You can put fail2ban to look for specific keywords and ban them if they keep trying. I did that a while back and my servers are in a much better spot. IP black/block lists also help.
Stuff that’s good:
- fail2ban + AbuseIPDB API
- ssh: + endlessh
- iocaine
Just for reference, my abuseipdb stats.
Edit: added iocaine link
Oops, forgot that its name is literally ripped from a well-known book-thing, so search results won’t be good. So here’s the link: https://iocaine.madhouse-project.org/
One crowdsec instance later the scan connections went down to not a lot.
You can selfhost the complete service. Only their Console Is a paid service, should you want or need that.
Oh yeah, that’s pretty standard.