3 ms·
I deliberately do not run Fail2Ban so that attackers waste their resources on my server. Before I turned off logging due to GDPR, I got 40M failed login attempt
by johndough 4y ago
I deliberately do not run Fail2Ban so that attackers waste their resources on my server. Before I turned off logging due to GDPR, I got 40M failed login attempts per month.
- Nextgrid 4y ago> Before I turned off logging due to GDPR, I got 40M failed login attempts per month. Logging failed login attempts would definitely fall under legitimate interest so you can reenable them. It's not like the attackers would complain anyway.
- johndough 4y agoLogging without consent would be legal due to legitimate interest, but I would also have to comply with "Chapter 3 Rights of the data subject" https://gdpr-info.eu/chapter-3/ https://gdpr-info.eu/chapter-3/ In particular, I do not like article 13 paragraph 1 section (a) because I prefer to stay anonymous. I still receive daily spam from the time I published my contact details on a website 10 years ago. It has also become illegal to embed contact details in an image or hide it behind a captcha due to accessibility. I would risk a 5000 € fine if I did it anyway.
- Terry_Roll 4y ago> Before I turned off logging due to GDPR, I got 40M failed login attempts per month I'd love to see one of their Data Subject Access Requests. Dear Victim, Can you wipe my failed login attempts from your servers. Yours, The Hacker!