Re: [CentOS] Simple way to banish IP addresses ?

Toby Bluhm wrote:

Toby Bluhm wrote:

...

Niki Kovacs wrote:

...

I just set up a web server... and my bandwidth is being eaten by some chinese folks trying to brute-force-ssh their way into the machine.

Is there a simple way to banish either single IP addresses or, maybe even better, whole IP classes ? I know it's feasible with iptables, but is there something more easily configurable ?

<snip> Let me note that at work, the security group has a script set up that does it automagically, after so many attempts.

And every morning or two in the logs, I see attacks from China, or Mexico, or Spain, or Taiwan... but then, we are a well-known site.

mark, supporting the NIH