I hope nobody minds me addressing this off topic question. I was thinking about adding ipv6, and when I got a range to try with, I was actually surprised how many I got. This made me wonder how many ipv6 are being used and how many ipv4. Having these ipv6 so abundantly available made me also think about how I have currently arranged my abuse mitigation. Currently I am having ipsets for different subments and use a sort of honeypot approach, anything automated that scans for vulnerabilities in wordpress or weird files and ignores the robots.txt is getting blocked. Such an approach will lead over years that you block most of azure, google, amazon, digitial ocean, .cn etc. I don't think this will go well for ipv6 to be honest. If there are so many out there, my ipsets will grow even bigger. I was wondering how others are solving this? --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|