Ein neuer Forumbeitrag: https://linux-nerds.org/topic/1688/fail2ban-auf-einem-systemd-system-debian-12 #linux #fail2ban
I've seen a real uptick the past couple of days in attacks on my IP address space. Not sure if I'm being targeted, or part of a wider campaign. Oh well, fail2ban makes quick work of them 
my adventures in #selfhosting - day 111 (quiet edition) 
Good morning Fedi friends!
I hope you had a nice weekend.
After backing up my two VPSs I am now staring at my #YunoHost dashboard thinking: now what?
It feels a little odd not to have to tackle any pressing self-hosting issues. Everything seems to be working well, including my manual installation of Ghost on a second (Ubuntu) VPS.
I'm now in maintenance mode.
I must confess in the past 24 hours I have spent some time browsing @yunohost 's app catalogue. So many fascinating things in there! But I am exercising restraint (for now, LOL!)
I'm very grateful for all the software I'm currently self-hosting.
On Debian (via YunoHost):
On Ubuntu:
I'm highly aware of my privilege and how lucky I am to be doing all this. But can I confess I'm a little bored? Thankfully I may have another big project on the horizon: upgrading my VPS and installing / self-hosting #PeerTube. But that will be for another week. Resting now and enjoying this sense of empowerment / digital sovereignty. Very grateful to be in this position.
Wishing you all a fantastic week!
Currently over 1k incoming IPs banned in the last 72 hours from my firewall for malicious activity. A new record - Winning! 
So I'm no regex expert, but this filter and jail combo for #Fail2Ban seem to be working pretty well at catching the two big scrapers that have been hammering me lately; #Claude and #Meta. The filter file will obviously have to be revised as new ones arise, but I've got the template figured out so I can just copy and paste and swap out the string I want to check for in a log entry.
Screenshots are attached.
The traffic from these #AI bots is getting a little ridiculous. They aren't using that much bandwidth, but they're making the spinning rust drives in my personal server (that I have to maintain and pay for) run constantly which means they never get to park and rest during times of inactivity. #Claude specifically has been hammering me for a week or more 24 hours straight.
So I'm tinkering with a #Fail2Ban filter to block AI bots and scrapers.
I'm curious to hear what others are #SelfHosting! Here's my current setup:
Hardware & OS
Infrastructure & Networking
Security & Monitoring
Authentication & Identity Management
Productivity & Personal Tools
#CookingAppsNotifications & Development Workflow
Accessibility Focus 
️
Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign, #DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!
I've also experimented with:
I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 
What's your setup like? Any cool services you'd recommend I try?
#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY
my adventures in #selfhosting - day 89 
Oh #PeerTube, you are making me do mental somersaults as I strategize about the best way to self-host my videos.
This newbie wants to ask: how many VPS’s are too many for someone who has little coding experience and has been self-hosting for just 3 months?
Fedi friends, I’m thinking of signing up for a THIRD VPS 
Why?
My current setup:
5€/month Debian VPS with #YunoHost, where I’m self-hosting #GoToSocial (this account), #Friendica, #Pixelfed, #Fail2Ban and #LinkStack.
5€/month Ubuntu VPS where I am self-hosting my (upcoming) #Ghost blog (this will make me save a ton, compared to my current Ghost Pro plan).
Back to PeerTube: I could easily upgrade my #Debian VPS and install it there - the costs would be minimal and I would double my RAM and storage. But I am afraid of PeerTube’s consumption when it comes to bandwidth. As in: if I upload a video that for some reason becomes really popular, or if a bad actor decides to DDOS my channel, would that take down all my other self-hosted Fediverse instances? Since they are on the same VPS?
I could limit potential issues by having a dedicated VPS just for PeerTube.
What would you do?
And do you have recommendations for Europe-based VPS’s with affordable plans? (aside from Hostinger) I was thinking of #Hetzner…
#MySoCalledSudoLife #AskFedi
@wutti Leider finde ich den Tröt nicht mehr aber den wesentlichen Link hatte ich gespeichert. Nachdem ich davon ausgehe, dass sie robots.txt geflissentlich ignorieren wird die Umsetzung mit #fail2ban sicher zuverlässiger funktionieren. Das steht bei mir auch noch an, aber hier erstmal der Link:
https://rainer.sokoll.com/?p=8353
@rainer Ja, die können scheinbar auch ganz übel Traffic generieren. Dank etwas Caching sind sie – von der Last her – nie negativ aufgefallen.
Übrigens: Interessanten Ansatz, die User-Agents via #fail2ban zu blocken 
(Und ja, ich kenne die «klassischen» (D)DoS-Angriffe seit Jahrzehnten. Und weiss auch, wie man (aus Versehen!) einen aufs Nachbardepartment absetzt…)
One month later...
Just to put in perspective the one fail2ban rule from this post has blocked 658 unique IP addresses.
https://seanland.ca/posts/2025-02-06-the-power-of-one-fail2ban-rule
Good morning Fedi friends!
I was just checking my #Fail2Ban logs and I'm a little taken aback by all the failed login attempts.
Asking the more experienced amongst you if this is normal?
The screenshot is from my Ubuntu VPS (which has been active for less than a month):
total failed: 737;
total banned 142.
By comparison my other VPS (the one with YunoHost on Debian) has the following stats:
total failed: 530;
total banned: 106.
I would definitely beef up my security even more but I don't really understand the security guide on YunoHost. If you have tips for TRUE newbies, I'm all ears :)
"Look ma, I'm coding!" 
Happy to report my #Fail2Ban installation was successful and I've enabled one jail so far.
Now off I go prepare for my Stanford in Florence Zoom call. Will I mention my FOSS journey? You bet! 
#MySoCalledSudoLife
my adventures in #selfhosting - day 77
This morning I'm attempting a manual install of #Fail2Ban (that is, with commands, no YunoHost) on my #Ubuntu VPS.
I've been greatly enjoying Fail2Ban on my #Debian VPS and I'd like to extend the same protections to the VPS with my self-hosted #Ghost blog.
I hope nothing goes wrong because I have a video call with Stanford students at the study abroad program in Florence at 11am (for a women in cinema class, I'm invited every year)... so I don't wanna feel distracted by tech issues, ha!
#MySoCalledSudoLife
wenn du die #fail2ban filter anpasst und plötzlich Frieden einkehrt in den Logfiles....
New video out!
Installing and configuring #fail2ban on #archlinux (Example: SSHD).
On #youtube
https://youtu.be/bn81HwcxQV4
On #Odysee
https://odysee.com/@YetanotherSysAdmin:0/Setting-up-Fail2Ban-on-Arch-Linux:d
Anoxinon e.V. 
