I have a similar experience: Some hosting providers / AS host shady stuff and I understand that VPS ranges end up on block lists quite easily.
I only block AS 4134 and AS 4837, some AS that host services like shodan, and aggressive crawlers like semrush.
Anything that sends packets to my server get ratelimited quickly. Still barely noticeable for occasional human interaction. I also started with /24, but I am now up to /12.
PS. By the way, has anyone ever seen [email protected] in the logs? It shows up almost on a weekly basis as RCPT TO address from literally all over the world.
I only block AS 4134 and AS 4837, some AS that host services like shodan, and aggressive crawlers like semrush.
Anything that sends packets to my server get ratelimited quickly. Still barely noticeable for occasional human interaction. I also started with /24, but I am now up to /12.
PS. By the way, has anyone ever seen [email protected] in the logs? It shows up almost on a weekly basis as RCPT TO address from literally all over the world.