Thank you very much it works
I have one last request, I know it’s out of this world but as I explained I was doing all this to have a dashboard: GitHub - VerifiedJoseph/intruder-alert: Event dashboard for Fail2ban
So I configured the yaml file
root@DietPi:~# sudo cat docker-compose.yml
version: '3'
services:
app:
image: ghcr.io/verifiedjoseph/intruder-alert:1.17.2
container_name: intruder-alert
environment:
- IA_TIMEZONE=Europe/London
- IA_SYSTEM_LOG_TIMEZONE=UTC
- IA_ASN_DATABASE=/app/backend/data/GeoLite2-ASN.mmdb
- IA_COUNTRY_DATABASE=/app/backend/data/GeoLite2-Country.mmdb
- IA_LOG_FOLDER=/app/backend/data/logs
- IA_DASH_UPDATES=true
volumes:
- /root/GeoLite2-ASN.mmdb:/app/backend/data/GeoLite2-ASN.mmdb:ro
- /root/GeoLite2-Country.mmdb:/app/backend/data/GeoLite2-Country.mmdb:ro
- /var/log/dropbear.log:/app/backend/data/logs/dropbear.log:ro
ports:
- '0.0.0.0:8080:8080'
security_opt:
- no-new-privileges:true
root@DietPi:~#
and i have one ban but the web page
root@DietPi:~# cat /var/log/dropbear.log
[1916] Jul 07 18:28:51 Failed loading /etc/dropbear/dropbear_dss_host_key
[1916] Jul 07 18:28:51 Not backgrounding
[1923] Jul 07 18:28:55 Child connection from 192.168.1.16:53935
[1923] Jul 07 18:28:55 Failed loading /etc/dropbear/dropbear_dss_host_key
[1923] Jul 07 18:28:58 Bad password attempt for 'root' from 192.168.1.16:53935
[1923] Jul 07 18:29:06 Password auth succeeded for 'root' from 192.168.1.16:53935
[1916] Jul 07 18:29:49 Early exit: Terminated by signal
[1923] Jul 07 18:29:49 Exit (root) from <192.168.1.16:53935>: Terminated by signal
[491] Jul 07 18:30:30 Failed loading /etc/dropbear/dropbear_dss_host_key
[491] Jul 07 18:30:30 Not backgrounding
[499] Jul 07 18:30:30 Child connection from 192.168.1.16:53991
[499] Jul 07 18:30:30 Failed loading /etc/dropbear/dropbear_dss_host_key
[499] Jul 07 18:31:13 Password auth succeeded for 'root' from 192.168.1.16:53991
[1779] Jul 07 18:31:40 Child connection from 192.168.1.5:52937
[1779] Jul 07 18:31:40 Failed loading /etc/dropbear/dropbear_dss_host_key
[1779] Jul 07 18:31:45 Bad password attempt for 'root' from 192.168.1.5:52937
[1779] Jul 07 18:31:47 Bad password attempt for 'root' from 192.168.1.5:52937
[1779] Jul 07 18:31:47 Bad password attempt for 'root' from 192.168.1.5:52937
[1779] Jul 07 18:32:35 Exit before auth from <192.168.1.5:52937>: (user 'root', 3 fails): Error reading: Connection reset by peer
[2621] Jul 07 18:38:57 Child connection from 192.168.1.5:60020
[2621] Jul 07 18:38:57 Failed loading /etc/dropbear/dropbear_dss_host_key
[2621] Jul 07 18:38:57 Bad password attempt for 'root' from 192.168.1.5:60020
[2621] Jul 07 18:38:58 Bad password attempt for 'root' from 192.168.1.5:60020
[2621] Jul 07 18:38:58 Bad password attempt for 'root' from 192.168.1.5:60020
[2621] Jul 07 18:38:58 Exit before auth from <192.168.1.5:60020>: (user 'root', 3 fails): Error reading: Connection reset by peer
[2685] Jul 07 18:40:30 Child connection from 183.81.169.238:56142
[2685] Jul 07 18:40:30 Failed loading /etc/dropbear/dropbear_dss_host_key
[2685] Jul 07 18:40:32 Bad password attempt for 'root' from 183.81.169.238:56142
[2685] Jul 07 18:40:39 Exit before auth from <183.81.169.238:56142>: (user 'root', 1 fails): Exited normally
[2690] Jul 07 18:40:39 Child connection from 183.81.169.238:54342
[2690] Jul 07 18:40:39 Failed loading /etc/dropbear/dropbear_dss_host_key
[2690] Jul 07 18:40:40 Bad password attempt for 'root' from 183.81.169.238:54342
[2690] Jul 07 18:40:41 Exit before auth from <183.81.169.238:54342>: (user 'root', 1 fails): Exited normally
[2691] Jul 07 18:40:41 Child connection from 183.81.169.238:54358
[2691] Jul 07 18:40:41 Failed loading /etc/dropbear/dropbear_dss_host_key
[2691] Jul 07 18:40:43 Bad password attempt for 'root' from 183.81.169.238:54358
[2691] Jul 07 18:40:43 Exit before auth from <183.81.169.238:54358>: (user 'root', 1 fails): Exited normally
[2693] Jul 07 18:40:43 Child connection from 183.81.169.238:54372
[2693] Jul 07 18:40:43 Failed loading /etc/dropbear/dropbear_dss_host_key
root@DietPi:~# sudo fail2ban-client status dropbear
Status for the jail: dropbear
|- Filter
| |- Currently failed: 0
| |- Total failed: 9
| `- Journal matches:
`- Actions
|- Currently banned: 2
|- Total banned: 3
`- Banned IP list: 192.168.1.5 183.81.169.238
root@DietPi:~#
If you can help me maybe it’s a big mistake on my part…