After months of logging, I have collated a list of rogue IP addresses trying to perform SSH brute-force logins, send SPAM, hack Wordpress admin logins, upload spammy links, etc:
SSH logins SRC Count 220.127.116.11 121 18.104.22.168 114 22.214.171.124 97 126.96.36.199 80 188.8.131.52 47 ...
So far nothing untoward has happened to my server. I was wondering, what should I do with this blacklist. I have over 1500 unique IP addresses distributed across 1000 different
/24 subnets. Blocking all of them would introduce additional workload on my server.
Is there any value for an IP addresses blacklist?