Blocking SSH access based on bad logins?

Denis D stdedjub at googlemail.com
Tue Aug 25 13:22:31 UTC 2015


have you tried fail2ban?

http://www.fail2ban.org/

On 25 August 2015 at 15:16, Jaime Kikpole <jkikpole at cairodurham.org> wrote:

> I've noticed a number of SSH login attempts for the username "admin"
> on my FreeBSD systems.  None of them have a username of "admin".  So I
> was wondering if there was a way (even via a port) to tell the system,
> "If an IP tries to login as 'admin', block that IP."
>
> I'm already using SSHGuard to block certain obvious attempts to break
> in.  I'm fine with altering its configs or adding/switching to a new
> port.
>
> Thanks.
>
> --
> Jaime Kikpole
> Network Administrator
> Cairo-Durham Central School District
>
> Technical Support:
> help at cairodurham.org
> go.cairodurham.org/techtips
>
> --
> This electronic message and any attachment(s) may contain confidential or
> legally privileged information protected by law from further disclosure and
> is intended only for the individual or entity identified above as the
> addressee. If you are not the addressee (or the employee or agency
> responsible to deliver it to the addressee), or if this message has been
> addressed to you in error, you are hereby notified that you may not copy,
> forward, disclose or use any part of this message or any attachment(s).
> Please notify the sender immediately by return email or telephone and
> permanently delete this message and attachment(s) from your system.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"
>


More information about the freebsd-questions mailing list