Show all posts.
If you have an open 22 port (SSH) on your machine, and you are interested in blocking all the IP addresses that try to bruteforce your password then this script is for you ;) .
As I really don't like using custom ports for any service if there is an other solution, I had to come up with this solution instead. In addition to this script there is also private/public key authentication turned on for dropbear (the ssh server for wl500gp) - however it's annoying seeing lots of invalid connections in auth.log :) .
How to use it:
The script could be started from crontab, and as it runs for at most 5-10 seconds for small authentication log files, i start this script every 15 minutes ;) .
You should change the path for all the files used in this script to match your system - then everything should work as expected.
you have questions - shoot me ;)
Download files: bruteForce.zip
The files included in the zip contain the ip addresses that tried to brute force my system. Keep the list if you want ;)
|