Re: [ossec-list] OSSEC Active Response Block on pattern-matched SSH user logins

2017-06-29 Thread Rahul Tiwari
ilures. authentication_failures, But its blocking the user ip after 10 attempt please help me out On Friday, June 16, 2017 at 1:16:39 AM UTC+5:30, dan (ddpbsd) wrote: > > On Thu, Jun 15, 2017 at 6:39 AM, Rahul Tiwari <rtiwa...@gmail.com > > wrote: > > Can you please provid

Re: [ossec-list] OSSEC Active Response Block on pattern-matched SSH user logins

2017-06-15 Thread Rahul Tiwari
Can you please provide the rule i am also having the same issue i need to block the user after failed attempts. Please help On Thursday, April 29, 2010 at 3:41:48 AM UTC+5:30, JL wrote: > > Hi all, > > Forgive me if this has been covered somewhere, but I haven't come > across it. > > > Is

[ossec-list] Block ssh user ip after failed login attempt in OSSEC

2017-06-28 Thread Rahul Tiwari
I need to block the user ip after 3 times login failed attempt in ossec I tried below in sshd_rules file 5716 Multiple SSHD authentication failures. authentication_failures, But its blocking the user ip after 10 attempt please help me out -- --- You received this