http://recchiaa3blv62iesz7qqrqabp4o3c3pv557cjz6r5vdarudusoiozqd.onion/server/fail2ban.shtml
< hostile-countries.txt And that's it, we now filter all traffic before it even hits fail2ban or any other rule. Does it matter, given root login and password logins are disabled in favor of SSH keys for a user account? Probably not. Is it good to know? I dunno, maybe, but it cleans up my logs, it may help prevent a DDOS from those regions, and I learned something.