Blocking SSH access based on bad logins?

[Polytropon]

On Tue, 25 Aug 2015 09:16:16 -0400, Jaime Kikpole wrote:
> I've noticed a number of SSH login attempts for the username "admin"
> on my FreeBSD systems.  None of them have a username of "admin".  So I
> was wondering if there was a way (even via a port) to tell the system,
> "If an IP tries to login as 'admin', block that IP."

I think "fail2ban" is the solution you are searching for.



> I'm already using SSHGuard to block certain obvious attempts to break
> in.  I'm fine with altering its configs or adding/switching to a new
> port.

You'll find "fail2ban" in the FreeBSD ports collection
along with some documentation. It's easy to set up. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...