View Single Post
Old 17th February 2013, 01:20
Ovidiu Ovidiu is offline
Senior Member
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts

I rarely have any attempts on SSH since I moved it to another port. BUT I jsut tried to anonymously log in via FTP 5x and found this in auth.log:

Feb 17 00:15:04 h2118175 pure-ftpd: (?@ [WARNING] Authentication failed for user [anonymous]

So that is ok and indeed in fail2ban.log I see:

2013-02-17 00:15:15,780 fail2ban.filter : DEBUG /var/log/syslog has been modified
2013-02-17 00:15:15,795 fail2ban.filter : DEBUG Found
The settings for this jail are:

enabled = true
port = ftp
filter = pure-ftpd
logpath = /var/log/syslog
maxretry = 3
findtime = 86400
So I should have been blocked :-(
Reply With Quote