py-ssh-ip-block-xethhung12 0.0.1

A small to scan the auth.log for faill ssh access and block the ip address that with fail count more than threshold

py_ssh_ip_block_xethhung12

Installation

pip install py-ssh-ip-block-xethhung

Prerequisite

Before start using the tool, two operation is required

1. Create ipset

   ipset create {set-name} hash:ip 
   

2. add iptables rule

   sudo iptables -A INPUT -m set --match-set {set-name} src -p tcp --destination-port {port} -j DROP 
   

Execution

Run through python project script

py-ssh-ip-block-xethhung12 -h

Delete Rules

Delete iptables rule

# get rule number
sudo iptables -L INPUT --line-numbers

# delete rule by line number
sudo iptable -D INPUT 2