**Marc Grondin** @mgrondin@social.linux.pizza · Oct 15, 2019, 23:06

**Marc Grondin** @mgrondin@social.linux.pizza · Oct 15, 2019, 23:06

Marc Grondin @mgrondin@social.linux.pizza

Oct 15, 2019, 23:06

Marc Grondin @mgrondin@social.linux.pizza

So i happened to look at journalctl on my VPS today and noticed a boob trying to ssh in as root...good thing firstly i don't permit password for root login's. His IP is also now being blocked...but he's still trying. Over 600 times in the last hour

**selea** @selea@social.linux.pizza · Oct 16, 2019, 05:31

**selea** @selea@social.linux.pizza · Oct 16, 2019, 05:31

Oct 16, 2019, 05:31

selea @selea@social.linux.pizza

@mgrondin

Install fail2ban

**Marc Grondin** @mgrondin@social.linux.pizza · 2019-10-16T09:12:18Z

Marc Grondin @mgrondin@social.linux.pizza

@selea sounds like what I was looking for. I came up with a manual solution to have it email me then I can ban. I'll check out fail2ban now. Thanks.

Oct 16, 2019, 09:12 · Tusky · · ·

**selea** @selea@social.linux.pizza · Oct 16, 2019, 10:27

**selea** @selea@social.linux.pizza · Oct 16, 2019, 10:27

Oct 16, 2019, 10:27

selea @selea@social.linux.pizza

@mgrondin

fail2ban is quite handy :)
You can configure it to automatically ban IP's, and report them to their ISP while report it to abuseipdb for example :)

**Shadow Tree Car** @shadowtreecar@social.linux.pizza · Oct 17, 2019, 04:33

**Shadow Tree Car** @shadowtreecar@social.linux.pizza · Oct 17, 2019, 04:33

Oct 17, 2019, 04:33

Shadow Tree Car @shadowtreecar@social.linux.pizza

@selea
Maybe I should check my VPS too
@mgrondin

**Marc Grondin** @mgrondin@social.linux.pizza · Oct 17, 2019, 09:28

**Marc Grondin** @mgrondin@social.linux.pizza · Oct 17, 2019, 09:28

Oct 17, 2019, 09:28

Marc Grondin @mgrondin@social.linux.pizza

@shadowtreecar probably a good idea. I mean it's something I knew went on in the wild( people trying to get into places they don't belong) but I never imagine it was common enough to hit a random VPS...