0

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers 

iptables -A INPUT -s 212.252.96.128 -j DROP

but there are too many IPs attacking how to prevent this kind of attacks ? Is there better way To protect my Ubuntu server from getting attacked ?

Improve this question
7
  • 3
    fail2ban is what you should be looking at. It can ban IPs after a certain configurable number of unsuccessful attempts to connect.
    – Arronical
    Jun 14, 2016 at 12:33
  • Wiki link - help.ubuntu.com/community/Fail2ban
    – user508889
    Jun 14, 2016 at 12:36
  • i try to read wiki link what is ignore ip is fore ? there is too many ips attacking my server
    – Vlark.Lopin
    Jun 14, 2016 at 12:38
  • Yeah, kind of confusing how that's written. ignoreip is the IP of the local server, it basically means, "don't block this, and ignore log entries".
    – user508889
    Jun 14, 2016 at 12:47
  • i installed fail2ban and set default data to sudo nano jail.local then i save and restarted fail2ban is this every thing i have to do ?
    – Vlark.Lopin
    Jun 14, 2016 at 12:51

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .