A lot of anynymous IP addresses are being banned in the log

[chris]

You should read about how to setup some additional IPSet blacklists for different services:

Firewall | Hestia Control Panel

Recommend IPSET Sources

I use: Stamparm ipsum level 3 (level 1 gave me FP): https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt Borestad AbuseIPDB-100-ALL (all ips with a 100% abuse score): https://raw.githubusercontent.com/borestad/blocklist-abuseipdb/main/abuseipdb-s100-all.ipv4 LittleJake also has some nice lists: AbuseIPDB-100: https://raw.githubusercontent.com/LittleJake/ip-blacklist/main/abuseipdb_blacklist_ip_score_100.txt I also have curated lists that I block with all or a selection of …

GitHub - chriscapisce/Custom-Exim4-Blacklists: Custom Exim4 Blacklists.

Limit access to your ssh service f.e. through firewall or /etc/hosts.allow

# Location 1 / Location 2 / Location 3
sshd: XX.XX.XX.XXX, XX.XX.XX.XXX, XX.XX.XX.XXX

Make sure you setup multiple ip’s in case one changes unexpectedly.
(I have f.e. some VPN ip’s to connect to when i’m on the road.)

Set /etc/hosts.deny

sshd: ALL