So I need to figure out how to block ASN(s)…

Additionally, I’ thinking of; How to detect DDoS attachs?

Here’s one way I’ve come up that’s quite simple:

Detecting DDoS attacks by tracking requests across multiple IPs in a sliding window. If total requests exceed a threshold in a given time, flag as potential DDoS.

On DDoS, wouldn’t sshguard and/or fail2ban work?

@bender@twtxt.net Wre I’m talking about Web right? 🤣

@prologic@twtxt.net fail2ban should work fine.

@bender@twtxt.net So you mean, get failtb2n to look at my Caddy audit logs for violations and then just block at the firewall level for repeated violations? 🤔