Reputation
Next privilege 5 Rep.
Participate in meta
Badges
0 0 0
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Oct
5
comment Fail2Ban does not ban failed root login attempt
I've noticed that in my /var/log/secure log I also had lots of lines like in the question reading Jan 20 10:51:04 localhost sshd[28676]: Received disconnect from 88.190.31.135: 11: Bye Bye [preauth] But without any other lines mentioning the same IP, so in the /etc/fail2ban/filter.d/sshd.conf file I added a filter reading ^%(__prefix_line)sReceived disconnect from <HOST>: 11: Bye Bye\s*$