Richard-

Consider using fail2ban, it will grok your logs, and block specific ip addresses based on previous failures.

Regards,
-Jamie



On Tue, Apr 7, 2020 at 12:27 AM Ed Greshko <ed.greshko@greshko.com> wrote:
On 2020-04-05 21:36, Richard Shaw wrote:
> I got tired of repeated SSH attempts and honest for my home network, there's few countries that need to be logging into my system, so I'm using a combination of fail2ban and blocking by country.

I live in Taiwan.  While I get the most ssh attempts from China, no surprise there, the second most offending
country is the USA.

Rather than doing something which needs updating, I decided to only allow public-key authentication on
ssh connections.

Fun Fact:  For the period Jan 31 to Apr 7 there were IPs from 116 unique countries attempting logins via ssh to my
system.  I run IPv6 as well and no attempts were made via those addresses.

--
The key to getting good answers is to ask good questions.
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org