On 8/07/2015 1:07 PM, Daniel Jitnah wrote:
Hi Luvers,
Just seeking an opinion from those using fail2ban.
I am seeing a lot of fail2ban activity (ie banning of IP on ssh) on a
particular server. This is far more than I am getting for other
servers I am managing.
What do people using fail2ban usually see on average.
I am seeing new ips being banned pretty much every 10-15 mins on this
server. Is this a lot or normal? Given that other servers may not see
one for days.
FWIW my average is 10 bans per day across three publicly accessible
servers. Though I do tend to use non-standard SSH ports and tight
iptables rules.
Apples and oranges in a way, everyone's set-up is different.
George
_______________________________________________
luv-main mailing list
[email protected]
http://lists.luv.asn.au/listinfo/luv-main
