Originally posted by zeeshanhayat
I would like to block an IPAddress upon say 5 Unsuccesful Logins. Any ideas or any other suggestions would be very helpful.
I don't know how to do that, but if you know the IP addresses of the computers which need to ssh into your computer, you could do what I did. Simply block everything, and allow just those select IP addresses. You'd use the /etc/hosts.allow, and hosts.deny files to do that.
I only allow computers from my University, and my parent's computer, since those are the only ones I need. I used to get those all the time, before I did this. Now I'll occasionally get one blocked login attempt every couple of days, usually from somewhere in East/Southeast Asia.