|
|
|
|
|
|
by duskwuff
528 days ago
|
|
|
> What am I missing? Fail2ban has been around a long time. Modern threat actors can spread requests out over large pools of source IPs. Rate limiting login attempts by IP isn't an effective means of preventing credential stuffing attacks. |
|
|