Questions tagged [fail2ban]

anti-bruteforcing daemon that works on connection attempts to services such as SSH

Filter by
Sorted by
Tagged with
15
votes
1answer
29k views

Installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
2
votes
1answer
2k views

Fail2Ban monitor HTPasswd/HTAccess

So i tried putting this in jail.local and restarting fail2ban but no go. [apache] enabled = true port = https filter = apache-auth logpath = /var/log/apache*/*error.log maxretry = 5 [apache] ...
0
votes
1answer
329 views

Fail2Ban not picking up dropbear auth failures

raspbian Linux [hostname] 4.9.36+ #1015 Thu Jul 6 16:07:57 BST 2017 armv6l GNU/Linux fail2ban is not picking up the dropbear auth failures. This was working for openssh without issues. I went to ...
2
votes
1answer
936 views

Server login attempts NOT blocked after configuring fail2ban

So, I installed (and configured) fail2ban on three Ubuntu VPS servers. I configured (imo) a maximum of 3 failed login attempts (via Putty as root) within 2 minutes. Then I restarted the fail2ban ...
1
vote
1answer
1k views

How to use Fail2Ban to protect ProxyPass(ed) applications

So I recently configured an application that uses WebSockets and I am using Apache proxy pass to pass on the application via domain.com/application The problem is the application is very bare metal. ...
0
votes
2answers
44 views

REGEX: flush a number of related chains in iptables

I want to flush a number of related chains in IPtables. Their names like 'f2b.*' I want the entire chain gone! e.g. all this gone. -A f2b-postfix-sasl -s 103.231.139.130/32 -j REJECT --reject-with ...