I also see them lately and like you assume they are from bots. I have ones trying misspelled userIDs from multiple sources.
— Billy Staggs bsta...@staggs.net > On Mar 14, 2022, at 12:48 PM, Harold Hallikainen via Fail2ban-users > <fail2ban-users@lists.sourceforge.net> wrote: > > > > Sorry if this is an old question or one with an obvious solution. I have > been using fail2ban for quite a while and really like it! But, in > reviewing logs, I see hundreds of ssh login attempts each day where there > is only one attempt per IP address. I suspect this is a bot net and would > like to ban them. Is there a command line method of telling to fail2ban to > ban ALL failures (not just multiple) in the past day (or other preiod)? > > THANKS! > > Harold > > > > > -- > FCC Rules Updated Daily at http://www.hallikainen.com > Not sent from an iPhone. > > > > -- > FCC Rules Updated Daily at http://www.hallikainen.com > Not sent from an iPhone. > > > _______________________________________________ > Fail2ban-users mailing list > Fail2ban-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
