[SLL] bad login attempts

[Chris & Kayla]

Fail2ban works well for me, very easy setup:
http://www.fail2ban.org

Paul A. Franz, P.E. wrote:
> Some days I get hit with many thousands of login probes. A clip of a few entries from
> the logs follows. I've got a couple of questions.
>
> 1) Should "lastb -a" show anything for all these? I show none.
>
> 2) I'm thinking that I'd like to use IPTables to drop all traffic from that IP once a
> specified count of bad logins has occurred within say, 1 minute. Any suggestions on
> how to do this?
>
>
>