8 Jul
2015
8 Jul
'15
3:36 a.m.
On 8/07/2015 1:07 PM, Daniel Jitnah wrote:
Hi Luvers,
Just seeking an opinion from those using fail2ban.
I am seeing a lot of fail2ban activity (ie banning of IP on ssh) on a particular server. This is far more than I am getting for other servers I am managing.
What do people using fail2ban usually see on average.
I am seeing new ips being banned pretty much every 10-15 mins on this server. Is this a lot or normal? Given that other servers may not see one for days.
FWIW my average is 10 bans per day across three publicly accessible servers. Though I do tend to use non-standard SSH ports and tight iptables rules. Apples and oranges in a way, everyone's set-up is different. George