如何在ssh中屏蔽IP

Question

在过去的几天里，一个非常坚持的人不断尝试获得（未经授权的）访问我的系统......有无数的条目，例如/var/log/auth.log：

Jun 21 03:55:15 cloudy sshd[32487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.116.20  user=root
Jun 21 03:55:16 cloudy sshd[32487]: Failed password for root from 116.31.116.20 port 30629 ssh2
Jun 21 03:55:19 cloudy sshd[32487]: Failed password for root from 116.31.116.20 port 30629 ssh2
Jun 21 03:55:21 cloudy sshd[32487]: Failed password for root from 116.31.116.20 port 30629 ssh2
Jun 21 03:55:21 cloudy sshd[32487]: Received disconnect from 116.31.116.20: 11:  [preauth]
Jun 21 03:55:21 cloudy sshd[32487]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.31.116.20  user=root

我想询问一些关于如何阻止此人消耗计算机资源的建议，是否有可能“硬阻止”该 IP 甚至打开 ssh 连接？请注意，我使用 Debian 8 作为操作系统。

Answer 1

来自http://www.linuxquestions.org/questions/linux-newbie-8/how-to-configure-ssh-to-allow-or-deny-specify-host-ip-address-610246/

添加sshd: 116.31.116.20​/etc/hosts.deny