Fail2Ban
From Rabbi Blog
Notes
- /var/log/fail2ban
Timing
We've been set to 1 month. I really don't care to see those IP addresses here.
Manual Banning
Ex: sudo fail2ban-client set <jail> banip <IP_ADDRESS>
sudo fail2ban-client set sshd banip 192.168.1.100
sudo fail2ban-client status sshd
sudo fail2ban-client set sshd unbanip 192.168.1.100