Q&A · Answered

How to secure SSH with fail2ban

asked 9 months, 1 week ago 1647 views 1 answer

My server is getting too many failed SSH login attempts. How can I block them?

noor_code Gold 255 rep

1 Answer

One accepted

Accepted answer

Not confirmed since it was written, 9 months, 1 week ago

# Install fail2ban
sudo apt install fail2ban

# Create local config
sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

# Edit /etc/fail2ban/jail.local
[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
bantime = 3600

# Start fail2ban
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

# Check status
sudo fail2ban-client status sshd

db_admin Silver answered 9 months, 1 week ago

Your answer

Say what you tried, not only what worked — the next person needs the reasoning. Code goes in a fenced block.