Fail2ban ssh

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Hydra installieren

  • apt install hydra

brute Force auf den Rechner

  • hydra -l xinux -P bad-passwords 10.0.10.104 ssh

sshd in fail2ban aktivieren

  • sed -ie "/^\[sshd\]/aenabled = true" jail.local

fail2ban neustarten

  • systemctl restart fail2ban

Status checken

  • fail2ban-client status sshd
Status for the jail: sshd
|- Filter
|  |- Currently failed:	1
|  |- Total failed:	14
|  `- File list:	/var/log/auth.log
`- Actions
   |- Currently banned:	1
   |- Total banned:	1
   `- Banned IP list:	172.31.31.1
Abgerufen von „http://wiki.ixheim.de/index.php?title=Fail2ban_ssh&oldid=38971“