I am trying to figure out an issue I have been having. I am using a webpanel called TinyCP and there is a table for displaying failed login attemps via SSH.
All SSH attempts, failed or successful, show that they are coming from my NAT. This then gives them all the same IP addresses and disabled me from using fail2ban to try and stop penetration tests.
I had this same issue on my web server and fixed it by using the mod_remoteip for apache to redirect X-Forwarded-For to the Remote IP.
Is it possible to do something like this with SSH so I am able to retrieve the actual public IP instead of the NAT?