InfoSec Person | Alt-Account#2

  • 0 Posts
  • 4 Comments
Joined 2 years ago
cake
Cake day: September 28th, 2023

help-circle
  • I need a recognisable domain name website that google or duckduckgo has picked as the product.

    This doesn’t always work. For example, I used to (and still do) see a lot of fake websites when I l type revanced (https://revanced.app/) on duckduckgo, and I’ve nearly fallen for two of the fake ones before (I think two of .com / .org / .to…?)

    Thankfully ublock origin warns users of this:

    Otherwise, I’d have 100% downloaded some malware-loaded crap.



  • Not exactly what you asked, but do you know about ufw-blocklist?

    I’ve been using this on my multiple VPSes for some time now and the number of fail2ban failed/banned has gone down like crazy. Previously, I had 20k failed attempts after a few months and 30-50 currently-banned IPs at all times; now it’s less than 1k failed after a year and maybe 3-ish banned at any time.

    There was also that paid service where users share their spammy IP address attempts with a centralized network, which does some dynamic intelligence monitoring. I forgot the name and search these days isn’t great. Something to do with “Sense”? It was paid, but well recommended as far as I remember.

    Edit: seems like the keyword is " threat intelligence platform"