After months of logging, I have collated a list of rogue IP addresses trying to perform SSH brute-force logins, send SPAM, hack Wordpress admin logins, upload spammy links, etc:
SSH logins SRC Count 18.104.22.168 121 22.214.171.124 114 126.96.36.199 97 188.8.131.52 80 184.108.40.206 47 ...
So far nothing untoward has happened to my server. I was wondering, what should I do with this blacklist. I have over 1500 unique IP addresses distributed across 1000 different
/24 subnets. Blocking all of them would introduce additional workload on my server.
Is there any value for an IP addresses blacklist?