Welcome, Guest. Please login or register.
Did you miss your activation email?
Thursday 05 December 2024, 09:49:48 pm

Login with username, password and session length

The Latest Endian Firewall is now available for download HERE
14261 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  General Support
| | |-+  Brute Force Attack - Non stop ssh login attempts
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Brute Force Attack - Non stop ssh login attempts  (Read 75282 times)
akehlert
Jr. Member
*
Offline Offline

Posts: 6


« on: Wednesday 02 December 2020, 09:38:07 pm »

Brute Force Attack - Non stop ssh login attempts

I am running EFW, lastest up.
I am getting hit by a brute force atatck of constant ssh logins attempts.

How do I automatically block those IP's

Logged
toka
Full Member
***
Offline Offline

Posts: 13



« Reply #1 on: Friday 04 December 2020, 01:20:43 am »

EFW unfortunately does not have the ability to automatically block by the rules.
And it would be nice for the parameter of the number of connections from one IP in a certain period of time.
Logged
akehlert
Jr. Member
*
Offline Offline

Posts: 6


« Reply #2 on: Wednesday 09 December 2020, 07:09:35 pm »

Thank you, is there any way to install maybe something like fail2ban to block the attack?
Logged
justme
Full Member
***
Offline Offline

Posts: 14



« Reply #3 on: Friday 19 February 2021, 08:40:11 pm »

the free version does not support fail2ban, but it could be installed manually and run using /var/efw/inithooks/start.local at startup, then you can use CUSTOMINPUT to block things
Logged
hadexx
Full Member
***
Offline Offline

Posts: 10


« Reply #4 on: Saturday 17 April 2021, 05:38:58 am »

Brute Force Attack - Non stop ssh login attempts

I am running EFW, lastest up.
I am getting hit by a brute force atatck of constant ssh logins attempts.

How do I automatically block those IP's



 if you try to block access only to known IPs or at least only of your country.
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.094 seconds with 19 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com