BlockHosts 2.3.1 (Default branch) |
|
|
BlockHosts is a script to record how many times a
local system is attacked, based on configurable
scanning of system logs for sshd or other
services. When a particular IP address exceeds a
configured number of failed login attempts, that
IP address is blocked using hosts.allow files, or
by using null-routing, or by using packet
filtering. An email notification facility is also
available.
License: Public Domain
Changes:
The log match rules were updated to accept lines
without a colon (:) after the [pid]. This is seen
in some Debian and Ubuntu installs, at least.
|