Blocking SSH Connections with the GeoLite2 Database

This guide will make it possible to block SSH access to your server based on the origin of the IP trying to access it!

How to add email notifications to Fail2ban

Following up an my other two post about Fail2ban notifications, that you can read here: Adding ban/unban notifications from Fail2Ban to Discord! and here Adding ban/unban notifications from Fail2Ban to Pushover! I...

Frontend

Redirecting visitors to a 403 forbidden page when accessing the WordPress admin page

So after my last post I woke up to around 40+ and counting notifications on IP’s that fail2ban had banned over the night. They were all failed attempts to get past the basic auth prompt I have on my WordPress...

Backend

Blocking countries with GeoLite2 in nginx using the swag/letsencrypt docker container

Since the GeoLite legacy database has been discontinued, we now have to use the GeoLite2 database to get new updates to the database. This will be a followup article from the post i made about the legacy database.

Backend

How to setup GitLab to use Rack Attack and ban abusive IPs and rate limit requests

So, for anyone that’s running the GitLab Docker container, I got real IPs to pass through to the logs and was then able to setup Rack Attack (similar to Fail2Ban), which is included by default, to ban abusive...

Security

Adding ban/unban notifications from Fail2Ban to Discord!

I thought I would follow up on the Fail2Ban Pushover post with a Fail2Ban Discord post!

Security

Adding ban/unban notifications from Fail2Ban to Pushover!

If you’re like me and think Fail2Ban is an awesome tool for intrusion protection, getting a notification when someone has been banned is the bee’s knees! And using Pushover makes it very simple!

Backend

How to setup Cloudflare and fail2ban with automated “set_real_ip_from” in nginx

If you’ve decided to use cloudflare as a CDN you’ve might have noticed that fail2ban isn’t working as expected. The fail2ban.log file will say that it has banned an IP, but since the connection is...

Security

Banning with basic auth and Fail2Ban

By using basic auth on you apps there is nothing stopping people from trying to brute force their way in. But by implementing Fail2ban, you can give the user or intruder x amount of retries before getting banned.