Hi, I’ve just purchased a new vServer - nothing done with it now beside installing Hestia. I’ve just looked into /var/log/auth.log and saw there are ssh login attempts nearly every 2-10 seconds (since 3 days now) :frowning: Hestia installed fail2ban but I get this statistic - can this be correct …

You may want to add recidive rule, change ssh port and enable the malicious ip filter [recidive] enabled = true logpath = /var/log/fail2ban.log port = all protocol = all bantime = 604800 ; 1 week findtime = 86400 ; 1 day maxretry = 5 You may also ban /24 instead of single IPs in /etc/fai…

New vServer - ssh login attempts every x seconds (DDoS?)

eris May 8, 2021, 5:39am 3

Use Ipset Blacklist

1 Like