I’ve been thinking about going this route. What size subnet are you banning? /24?

Only thing stopping me is I selfhost email and don’t want to ban say a whole subnet from Microsoft/Azure and end up blocking the outgoing servers for O365. I’m sure I can dig around and look at the prefixes to see which are used for which of their services just haven’t had the time yet.

Crowdsec with a central LAPI server. You should install it on the servers themselves to monitor the application logs directly. Then every bouncer(firewall, router, edge device) connected to the LAPI will all block the same IPs. I got sick of repeat offenders and upped the ban time to 1 year in hours.

Good. Should have never been there to begin with anyway. Peace talks are between the parties engaged in conflict and a peaceful nation for mediation. The US has not been a peaceful nation for some time with regards to being involved in armed conflicts itself.