As this is my private VPS, it is super annoying to see people attempting to try to ssh into my server.<\/p>\n
I am current using fail2ban to filter out IPs that are attempting to ssh into my server multiple times and have them permabanned.<\/p>\n
It’s been one month since it is implemented and this is the current statistics.<\/p>\n
It is interesting to see China being the main source of IP being banned.<\/p>\n
Maybe they are being too aggressive and keeps on triggering my ban rules?<\/p>\n
Still there are plenty of other countries being banned too.<\/p>\n
Banned IP country status\r\nTotal IP banned: 126\r\n1 GeoIP Country Edition: A1, Anonymous Proxy\r\n2 GeoIP Country Edition: CA, Canada\r\n1 GeoIP Country Edition: CH, Switzerland\r\n57 GeoIP Country Edition: CN, China\r\n1 GeoIP Country Edition: CO, Colombia\r\n1 GeoIP Country Edition: CZ, Czech Republic\r\n4 GeoIP Country Edition: DE, Germany\r\n1 GeoIP Country Edition: DO, Dominican Republic\r\n4 GeoIP Country Edition: GB, United Kingdom\r\n1 GeoIP Country Edition: HK, Hong Kong\r\n1 GeoIP Country Edition: ID, Indonesia\r\n4 GeoIP Country Edition: IN, India\r\n5 GeoIP Country Edition: IP Address not found\r\n2 GeoIP Country Edition: IT, Italy\r\n1 GeoIP Country Edition: JP, Japan\r\n5 GeoIP Country Edition: KR, Korea, Republic of\r\n1 GeoIP Country Edition: NI, Nicaragua\r\n5 GeoIP Country Edition: NL, Netherlands\r\n1 GeoIP Country Edition: PE, Peru\r\n1 GeoIP Country Edition: PK, Pakistan\r\n1 GeoIP Country Edition: RO, Romania\r\n3 GeoIP Country Edition: RU, Russian Federation\r\n1 GeoIP Country Edition: SE, Sweden\r\n3 GeoIP Country Edition: TH, Thailand\r\n1 GeoIP Country Edition: TR, Turkey\r\n2 GeoIP Country Edition: TW, Taiwan\r\n2 GeoIP Country Edition: UA, Ukraine\r\n11 GeoIP Country Edition: US, United States\r\n2 GeoIP Country Edition: VN, Vietnam\r\n1 GeoIP Country Edition: ZA, South Africa\r\n\r\n<\/pre>\nSample bash script source code to get the results above<\/p>\n
#!\/bin\/bash\r\n\r\n#Gets the list of IP being banned for sshd in fail2ban\r\nIP_LIST=$(fail2ban-client status sshd | grep Banned | cut -d\":\" -f2 | tr \" \" \"\\n\" | sed -e 's\/^[ \\t]*\/\/' )\r\n\r\n#Count the list of IP\r\necho \"Total IP banned: \" $(echo \"$IP_LIST\" | wc -l)\r\n\r\n#Uses geoiplookup to locate the country of the IPs and count them\r\n( for IP in $IP_LIST ; do geoiplookup $IP ; done ) | sort | uniq -c\r\n\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"As this is my private VPS, it is super annoying to see people attempting to try to ssh into my server. I am current using fail2ban to filter out IPs that are attempting to ssh into my server multiple times and have them permabanned. It’s been one month since it is implemented and this is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":[]},"categories":[3],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"\n
Interesting findings on ssh fail2ban - Yume's Wonderland<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Interesting findings on ssh fail2ban - Yume's Wonderland\" \/>\n<meta property=\"og:description\" content=\"As this is my private VPS, it is super annoying to see people attempting to try to ssh into my server. I am current using fail2ban to filter out IPs that are attempting to ssh into my server multiple times and have them permabanned. It’s been one month since it is implemented and this is […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/\" \/>\n<meta property=\"og:site_name\" content=\"Yume's Wonderland\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-09T14:31:48+00:00\" \/>\n<meta name=\"author\" content=\"waijie666\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"waijie666\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/\",\"url\":\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/\",\"name\":\"Interesting findings on ssh fail2ban - Yume's Wonderland\",\"isPartOf\":{\"@id\":\"https:\/\/dream-wonderland.com\/blog\/#website\"},\"datePublished\":\"2017-06-09T14:31:48+00:00\",\"dateModified\":\"2017-06-09T14:31:48+00:00\",\"author\":{\"@id\":\"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/a64bd69963f0c27788844ed58867848e\"},\"breadcrumb\":{\"@id\":\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dream-wonderland.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Interesting findings on ssh fail2ban\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dream-wonderland.com\/blog\/#website\",\"url\":\"https:\/\/dream-wonderland.com\/blog\/\",\"name\":\"Yume's Wonderland\",\"description\":\"Just a playground for myself\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dream-wonderland.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/a64bd69963f0c27788844ed58867848e\",\"name\":\"waijie666\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/460a19534a9a1f703611c3b035ed2c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/460a19534a9a1f703611c3b035ed2c3d?s=96&d=mm&r=g\",\"caption\":\"waijie666\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Interesting findings on ssh fail2ban - Yume's Wonderland","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/","og_locale":"en_US","og_type":"article","og_title":"Interesting findings on ssh fail2ban - Yume's Wonderland","og_description":"As this is my private VPS, it is super annoying to see people attempting to try to ssh into my server. I am current using fail2ban to filter out IPs that are attempting to ssh into my server multiple times and have them permabanned. It’s been one month since it is implemented and this is […]","og_url":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/","og_site_name":"Yume's Wonderland","article_published_time":"2017-06-09T14:31:48+00:00","author":"waijie666","twitter_card":"summary_large_image","twitter_misc":{"Written by":"waijie666","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/","url":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/","name":"Interesting findings on ssh fail2ban - Yume's Wonderland","isPartOf":{"@id":"https:\/\/dream-wonderland.com\/blog\/#website"},"datePublished":"2017-06-09T14:31:48+00:00","dateModified":"2017-06-09T14:31:48+00:00","author":{"@id":"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/a64bd69963f0c27788844ed58867848e"},"breadcrumb":{"@id":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dream-wonderland.com\/blog\/2017\/06\/09\/interesting-findings-ssh-fail2ban\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dream-wonderland.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Interesting findings on ssh fail2ban"}]},{"@type":"WebSite","@id":"https:\/\/dream-wonderland.com\/blog\/#website","url":"https:\/\/dream-wonderland.com\/blog\/","name":"Yume's Wonderland","description":"Just a playground for myself","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dream-wonderland.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/a64bd69963f0c27788844ed58867848e","name":"waijie666","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dream-wonderland.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/460a19534a9a1f703611c3b035ed2c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/460a19534a9a1f703611c3b035ed2c3d?s=96&d=mm&r=g","caption":"waijie666"}}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8I9dr-7b","jetpack-related-posts":[{"id":108,"url":"https:\/\/dream-wonderland.com\/blog\/2017\/05\/09\/website-is-up\/","url_meta":{"origin":445,"position":0},"title":"Website is UP","date":"May 9, 2017","format":false,"excerpt":"After a few days of work in the server backend, finally I believe almost everything is up right now. There are quite a lot of things that cause me issues in the backend. DNS and Domain Issues Firstly, I got my domain name and proceeded to register my DNS nameservers.\u2026","rel":"","context":"In "Server"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1592,"url":"https:\/\/dream-wonderland.com\/blog\/2018\/09\/20\/blog-is-pretty-much-dead\/","url_meta":{"origin":445,"position":1},"title":"Blog is pretty much dead","date":"September 20, 2018","format":false,"excerpt":"I think I am just too lazy to think or compose anything to post recently. The VPS behind this server is a bit going to waste but it's still hosting one script which is in use for a discord server. Still thinking of a good way to make use of\u2026","rel":"","context":"Similar post","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":594,"url":"https:\/\/dream-wonderland.com\/blog\/2017\/07\/28\/aikatsu-stars-66-idoltime-pripara-17-review\/","url_meta":{"origin":445,"position":2},"title":"Aikatsu Stars 66 and Idoltime Pripara 17 Review","date":"July 28, 2017","format":false,"excerpt":"Aikatsu Stars 66 Kirara and Yume both performed in this episode but quite obviously this is the Yume episode again. As a diehard Yume fan, adorable Yume shots are just everywhere and I'm so Yume satisfied after watching this episode. Yume was so good in bringing all the kids into\u2026","rel":"","context":"In "Aikatsu"","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/dream-wonderland.com\/blog\/wp-content\/uploads\/2017\/07\/Ohys-Raws-Aikatsu-Stars-66-TX-1280x720-x264-AAC.mp4_20170727_232341.300-300x169.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":34,"url":"https:\/\/dream-wonderland.com\/blog\/2017\/05\/04\/first-actual-post-site\/","url_meta":{"origin":445,"position":3},"title":"First actual post in this site","date":"May 4, 2017","format":false,"excerpt":"Just subscribed to a VPS. Still busy setting up the server, related infrastructure and building just a basic site. I still haven't bought\u00a0any domain name yet. More to come in the future.","rel":"","context":"In "Server"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1291,"url":"https:\/\/dream-wonderland.com\/blog\/2018\/01\/29\/aikatsu-stars-91-idoltime-pripara-42-review\/","url_meta":{"origin":445,"position":4},"title":"Aikatsu Stars 91 and Idoltime Pripara 42 Review","date":"January 29, 2018","format":false,"excerpt":"Aikatsu Stars 91 Mahiru and Aria episode really feels like a filler at this point. Aria is definitely cute and all but this is essentially intruding on Mahiru's episode. It's pretty sad that Mahiru's personal episodes are always burdened with Venus Ark students for now. Aria is working hard trying\u2026","rel":"","context":"In "Aikatsu"","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/dream-wonderland.com\/blog\/wp-content\/uploads\/2018\/01\/Ohys-Raws-Aikatsu-Stars-91-TX-1280x720-x264-AAC.mp4_20180129_220941.278-300x169.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":678,"url":"https:\/\/dream-wonderland.com\/blog\/2017\/08\/20\/aikatsu-stars-69-idoltime-pripara-20-review\/","url_meta":{"origin":445,"position":5},"title":"Aikatsu Stars 69 and Idoltime Pripara 20 Review","date":"August 20, 2017","format":false,"excerpt":"Aikatsu Stars 69 \u00a0 The first crossover episode has come. Welcome back Akari!!!! In my opinion, this episode is a bit underwhelming due to the boring idea\/execution of the plot point : Finding four-leaf clovers. We didn't even get to see the real fun side of Luminas. Luminas didn't even\u2026","rel":"","context":"In "Aikatsu"","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/dream-wonderland.com\/blog\/wp-content\/uploads\/2017\/08\/Ohys-Raws-Aikatsu-Stars-69-TX-1280x720-x264-AAC.mp4_20170819_232328.592-300x169.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/posts\/445"}],"collection":[{"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/comments?post=445"}],"version-history":[{"count":1,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/posts\/445\/revisions"}],"predecessor-version":[{"id":446,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/posts\/445\/revisions\/446"}],"wp:attachment":[{"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/media?parent=445"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/categories?post=445"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dream-wonderland.com\/blog\/wp-json\/wp\/v2\/tags?post=445"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}