Block IP after x failed ssh login attempts...
How do I block an IP address after x number of failed ssh login attempts? Any scripts handy I can just plug right in? It'd be great to be able to get an email upon such incident as well…
thanks….
4 Replies
If you are worried about attacks to ssh, consider configuring it with certificates or create a "double protection" solution with port knocking. The latter way, all IPs not sending the right knocking sequence are blocked. See
even further
It's not a bad idea to check the sshd and sshd_config man pages to see the available options.