#FreeBSD15 has an updated blocklistd daemon thanks to efforts from jlduran@ with help from emaste@ & myself, imported from NetBSD https://github.com/zoulasc/blocklist
Blocklistd is an additional hook into sshd from OpenBSD, that tracks failed attempts. It now blocks on failed usernames as well.
I added a small notification
to the script and get a very satisfying notification every time one of my servers bans a crawler.
I should also extend this so that it handles more than just ssh, but also links into our web crawler detection tooling.
I also want to extend this script so that getting a ban one on server gets you a block on all of them :)