August 10, 2005

Autoblock SSH-attacking IP addresses

blocker

"blocker" is a small awk script for blocking packets from malicious hosts. It blocks the IP addresses from which ssh connections are tried to be established with wrong authentication information several times.

The small script is designed to be used as:

tail --follow=name /var/log/messages | blocker

Posted by mark at August 10, 2005 11:08 AM | TrackBack