[HexDEF6]

Originariamente inviato da texerasmo

Ciao,
complimenti per la guida.
Diciamo che io sono uno che controlla spesso il log.
Volevo chiederti un cosa.
Ho un server linux virtuale su arua e costantemente ricevo tentativi di intrusione via ssh.

come questi Mar 9 02:49:16 62 sshd[32245]: Failed password for invalid user mona from 87.106.102.165 port 45015 ssh2
Mar 9 02:49:16 62 sshd[32387]: Invalid user mona from 87.106.102.165
Mar 9 02:49:19 62 sshd[32387]: Failed password for invalid user mona from 87.106.102.165 port 45097 ssh2
Mar 9 02:49:19 62 sshd[32544]: Invalid user monika from 87.106.102.165
Mar 9 02:49:22 62 sshd[32544]: Failed password for invalid user monika from 87.106.102.165 port 45179 ssh2
Mar 9 02:49:22 62 sshd[32680]: Invalid user monika from 87.106.102.165
Mar 9 02:49:24 62 sshd[32680]: Failed password for invalid user monika from 87.106.102.165 port 45257 ssh2
Mar 9 02:49:25 62 sshd[1428]: Invalid user monoko from 87.106.102.165
Mar 9 02:49:27 62 sshd[1428]: Failed password for invalid user monoko from 87.106.102.165 port 45337 ssh2
Mar 9 02:49:28 62 sshd[1626]: Invalid user moriko from 87.106.102.165
Mar 9 02:49:30 62 sshd[1626]: Failed password for invalid user moriko from 87.106.102.165 port 45419 ssh2
Mar 9 02:49:31 62 sshd[1814]: Invalid user moriko from 87.106.102.165
Mar 9 02:49:33 62 sshd[1814]: Failed password for invalid user moriko from 87.106.102.165 port 45501 ssh2
Mar 9 02:49:34 62 sshd[1969]: Invalid user morita from 87.106.102.165
Mar 9 02:49:36 62 sshd[1969]: Failed password for invalid user morita from 87.106.102.165 port 45588 ssh2
Mar 9 02:49:37 62 sshd[3144]: Invalid user morita from 87.106.102.165
Mar 9 02:49:39 62 sshd[3144]: Failed password for invalid user morita from 87.106.102.165 port 45673 ssh2
Mar 9 02:49:40 62 sshd[3327]: Invalid user moritz from 87.106.102.165
Mar 9 02:49:42 62 sshd[3327]: Failed password for invalid user moritz from 87.106.102.165 port 45755 ssh2
Mar 9 02:49:43 62 sshd[3485]: Invalid user moritz from 87.106.102.165
Mar 9 02:49:45 62 sshd[3485]: Failed password for invalid user moritz from 87.106.102.165 port 45833 ssh2
Mar 9 02:49:46 62 sshd[3604]: Invalid user muie from 87.106.102.165




Ora volevo chiederti c'è un modo per inibire ip per in tot di tempo dopo che l'utente ha avuto Failed password per tre volte consecutive?


Grazie

se le tue password sono "sicure" puoi fregartene... ma comunque, puoi dare un occhio a questo:
http://denyhosts.sourceforge.net/

Ciao