SSH防护

日志

/var/log/auth.log 中记录了SSH登录尝试，如果没有此文件，可尝试重启syslog: service syslog restart

防护

SSH证书登录

fail2ban

安装

apt install fail2ban

配置

vim /etc/fail2ban/jail.local

[sshd]               
enabled = true
port = 14213
filter = sshd
logpath = /var/log/auth.log
maxretry = 5
bantime = 12h

重启

service fail2ban restart

fail2ban-client status sshd

日志

/var/log/fail2ban.log