One Hat Cyber Team
Your IP :
18.119.129.134
Server IP :
104.21.16.1
Server :
Linux agrigation-prod 5.15.0-67-generic #74-Ubuntu SMP Wed Feb 22 14:14:39 UTC 2023 x86_64
Server Software :
nginx/1.24.0
PHP Version :
7.4.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
etc
/
fail2ban
/
filter.d
/
Edit File:
selinux-ssh.conf
# Fail2Ban configuration file for SELinux ssh authentication errors # [INCLUDES] after = selinux-common.conf [Definition] _type = USER_(ERR|AUTH) _uid = 0 _auid = \d+ _subj = (?:unconfined_u|system_u):system_r:sshd_t:s0-s0:c0\.c1023 _exe =/usr/sbin/sshd _terminal = ssh _msg = op=\S+ acct=(?P<_quote_acct>"?)\S+(?P=_quote_acct) exe="%(_exe)s" hostname=(\?|(\d+\.){3}\d+) addr=<HOST> terminal=%(_terminal)s res=failed # DEV Notes: # # Note: USER_LOGIN is ignored as this is the duplicate messsage # ssh logs after 3 USER_AUTH failures. # # Author: Daniel Black
Simpan