Control Web Panel

Security => CSF Firewall => Topic started by: weasam on September 12, 2023, 12:04:44 AM

Title: AbuseIP DB on centos
Post by: weasam on September 12, 2023, 12:04:44 AM

Have anyone success use abuseIPdb in centos block the IPs that have report threshold at 10times?

It's very easy
https://www.abuseipdb.com/csf

and can activate other IP database in this file
vi /etc/csf/csf.blocklists

 I enabled all of the list, share what IP list have you enabled.

Title: Re: AbuseIP DB on centos
Post by: overseer on September 12, 2023, 12:38:43 AM

Good to be aware of. I have various RBLs in place for Postfix (SMTP) and of course CSF/LFD running server-wide, as well as WAF (web application firewalls) for each WordPress install. More tools = better, as long as we don't see huge performance hit as with looking up full country code blocks under CSF.

Title: Re: AbuseIP DB on centos
Post by: Starburst on September 12, 2023, 07:24:26 AM

We've been using them, along with auto reporting.

Be careful how many lists you have enabled, as it can slow and possibly overload the server.

One of the the core lists that's good is DShield. Been using that list for 23 years.

Title: Re: AbuseIP DB on centos
Post by: weasam on September 13, 2023, 05:44:03 PM

Quote from: Starburst on September 12, 2023, 07:24:26 AM

We've been using them, along with auto reporting.

Be careful how many lists you have enabled, as it can slow and possibly overload the server.

One of the the core lists that's good is DShield. Been using that list for 23 years.

I running all list enable. I found that is will slow the server definitely as you described. So I should consider one or two list enable and use AbuseIPdb auto-script  to contribute reports.  Thanks all of you reply