1

I have a CentOS Server, and I found so many SSH Scanner scanning my Server, I want to record all the Scanner source IPs, and set them into my firewall.

So, who can help to recommend any SSH Scanner record software?

1

I would use fail2ban - although it doesn't care about SSH specifically, it will do exactly what you are asking for (and then some).

What it does do is let you specify what logs to watch, and keywords to watch for - like "authentication failed". After X number of those in Y seconds, it will automatically add a firewall rule for you.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.