Linux.com

Take a look at fail2ban

Posted by: Anonymous Coward on March 27, 2007 03:36 AM
Fail2Ban is a nice application that watches various log files. On certain conditions it will ban a given ip addresses for a period of time.

<a href="http://www.fail2ban.org/wiki/index.php/Main_Page" title="fail2ban.org">http://www.fail2ban.org/wiki/index.php/Main_Page</a fail2ban.org>

This can be used to watch any service log. Out of the box it will watch ssh. You can easily configure the ban period and the number of failed attempts before an IP is banned.

It's easy to install (I knwo there are apt packages for Ubuntu).

#

Return to Protect SSH from brute force attacks with pam_abl