Skip to content
Block IPs that continuously fail root SSH attempts
Go Dockerfile
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore
.travis.yml
Dockerfile
LICENSE
README.md
config.yaml
edgerouter.go
go.mod
go.sum
main.go
metrics.go
router.go

README.md

Build Status

RootBlocker

Block IPs that continuously fail root SSH attempts.

This tool tails logs in Elasticsearch looking for "Failed password for root" messages. When enough attempts are made in a period it adds the IP to a block list on a router.

Currently the only router supported is the Ubiquiti EdgeRouter, because that's what I use.

You can’t perform that action at this time.