Bill MacKenty

fail2ban

I’m using this fail2ban

Because I was getting tired of this:

Mar 7 17:01:39 grue sshd[8895]: Failed password for invalid user simmons from 82.97.15.30 port 38288 ssh2
Mar 7 18:17:41 grue sshd[9154]: Failed password for invalid user test from 142.58.13.91 port 21637 ssh2
Mar 7 18:17:43 grue sshd[9157]: Failed password for invalid user testuser from 142.58.13.91 port 22497 ssh2
Mar 7 18:17:46 grue sshd[9159]: Failed password for invalid user test1 from 142.58.13.91 port 22851 ssh2
Mar 7 18:17:48 grue sshd[9161]: Failed password for invalid user test from 142.58.13.91 port 23192 ssh2
Mar 7 18:17:50 grue sshd[9163]: Failed password for invalid user test from 142.58.13.91 port 23525 ssh2
Mar 7 18:17:53 grue sshd[9165]: Failed password for invalid user test from 142.58.13.91 port 23890 ssh2
Mar 7 18:17:56 grue sshd[9167]: Failed password for invalid user testing from 142.58.13.91 port 24288 ssh2
Mar 7 18:18:12 grue sshd[9179]: Failed password for invalid user admin from 142.58.13.91 port 26452 ssh2
Mar 7 18:18:15 grue sshd[9181]: Failed password for invalid user admin from 142.58.13.91 port 26827 ssh2
Mar 7 18:18:18 grue sshd[9183]: Failed password for invalid user admin from 142.58.13.91 port 27207 ssh2
Mar 7 18:20:01 grue sshd[9263]: Failed password for invalid user jeep from 142.58.13.91 port 41595 ssh2
Mar 7 18:20:04 grue sshd[9265]: Failed password for invalid user alan from 142.58.13.91 port 41985 ssh2
Mar 7 18:20:07 grue sshd[9267]: Failed password for invalid user jim from 142.58.13.91 port 42397 ssh2
Mar 7 18:20:10 grue sshd[9269]: Failed password for invalid user postgres from 142.58.13.91 port 42803 ssh2
Mar 7 18:20:13 grue sshd[9271]: Failed password for invalid user stuff from 142.58.13.91 port 43217 ssh2
Mar 7 18:20:16 grue sshd[9273]: Failed password for invalid user tom from 142.58.13.91 port 43606 ssh2
Mar 7 18:20:19 grue sshd[9275]: Failed password for invalid user adam from 142.58.13.91 port 8257 ssh2
Mar 7 18:20:28 grue sshd[9281]: Failed password for invalid user gov from 142.58.13.91 port 9349 ssh2
Mar 7 18:20:34 grue sshd[9285]: Failed password for invalid user pgsql from 142.58.13.91 port 10193 ssh2
Mar 7 18:20:37 grue sshd[9287]: Failed password for invalid user adm from 142.58.13.91 port 10562 ssh2
Mar 7 18:20:43 grue sshd[9291]: Failed password for invalid user postgres from 142.58.13.91 port 11167 ssh2
Mar 7 18:20:49 grue sshd[9295]: Failed password for invalid user email from 142.58.13.91 port 11656 ssh2
Mar 7 18:20:52 grue sshd[9297]: Failed password for invalid user oracle from 142.58.13.91 port 11926 ssh2
Mar 7 18:20:55 grue sshd[9299]: Failed password for invalid user users from 142.58.13.91 port 12134 ssh2
Mar 7 18:20:58 grue sshd[9301]: Failed password for invalid user user from 142.58.13.91 port 12436 ssh2
Mar 7 18:21:01 grue sshd[9303]: Failed password for invalid user test from 142.58.13.91 port 12652 ssh2
Mar 7 18:21:04 grue sshd[9305]: Failed password for invalid user david from 142.58.13.91 port 12826 ssh2
Mar 7 18:21:07 grue sshd[9307]: Failed password for invalid user lynx from 142.58.13.91 port 13047 ssh2
Mar 7 18:21:10 grue sshd[9309]: Failed password for invalid user music from 142.58.13.91 port 13200 ssh2
Mar 7 18:21:13 grue sshd[9313]: Failed password for invalid user user from 142.58.13.91 port 13384 ssh2
Mar 7 18:21:16 grue sshd[9315]: Failed password for invalid user user from 142.58.13.91 port 13587 ssh2
Mar 7 18:21:19 grue sshd[9317]: Failed password for invalid user user from 142.58.13.91 port 13704 ssh2
Mar 7 19:12:58 grue sshd[9348]: Failed password for invalid user harvey from 82.97.15.30 port 54299 ssh2