Sorry if this is an old question or one with an obvious solution. I have been using fail2ban for quite a while and really like it! But, in reviewing logs, I see hundreds of ssh login attempts each day where there is only one attempt per IP address. I suspect this is a bot net and would like to ban them. Is there a command line method of telling to fail2ban to ban ALL failures (not just multiple) in the past day (or other preiod)? THANKS! Harold -- FCC Rules Updated Daily at http://www.hallikainen.com Not sent from an iPhone. -- FCC Rules Updated Daily at http://www.hallikainen.com Not sent from an iPhone. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
[Fail2ban-users] Command line ban all failures?
Harold Hallikainen via Fail2ban-users Mon, 14 Mar 2022 10:52:06 -0700
- [Fail2ban-users] Command line ba... Harold Hallikainen via Fail2ban-users
- Re: [Fail2ban-users] Comman... Anna “CyberTailor” via Fail2ban-users
- Re: [Fail2ban-users] Co... Harold Hallikainen via Fail2ban-users
- Re: [Fail2ban-users] Comman... Billy Staggs
- Re: [Fail2ban-users] Comman... Doug Preston via Fail2ban-users
- Re: [Fail2ban-users] Co... Harold Hallikainen via Fail2ban-users