Blocking IP addresses Nginx proxy manager on VPS
reddit / selfhosted

----------------------------------------------------------------------
Chrispikaan · 2023-10-25 20:52

Hi everyone,

I run Nginx Proxy Manager on a VPS with some public websites. I have a
logging tool and I see that some abuse IP's are showing up access my
website(s) searching for exploits and bruteforcing.
I want to (automatic) block those IP's.


What is the best way to do this? And do you have a guide?

----------------------------------------------------------------------
_RouteThe_Switch · 2023-10-25 21:12

Google fail2ban, there are some other ones but I've had good results
with fail2ban

----------------------------------------------------------------------
Mlitz · 2023-10-25 22:45

Fail2Ban or CrowdSec

----------------------------------------------------------------------
BadGroundbreaking243 · 2023-10-26 08:03

Agree with these 2 suggestion.

----------------------------------------------------------------------
Chrispikaan · 2023-10-26 10:48

Yeah fail2ban sounds good. Can I just run it on the host (Ubuntu) or
do I need to run it in a docker container because Nginx Proxy Manager
is also running in a docker container?

----------------------------------------------------------------------
Mlitz · 2023-10-26 13:26

I use SWAG by LinuxServer.io, it has Fail2Ban built in

----------------------------------------------------------------------
Xenkath · 2023-10-26 19:59

You can run Fail2ban wherever you’d like, as long as it can access
NPM’s log files.