3 ms·
> What am I missing? Fail2ban has been around a long time. Modern threat actors can spread requests out over large pools of source IPs. Rate limiting login att
by duskwuff 2y ago
> What am I missing? Fail2ban has been around a long time.
Modern threat actors can spread requests out over large pools of source IPs. Rate limiting login attempts by IP isn't an effective means of preventing credential stuffing attacks.