BruteForceBlocker and Mindflow have partnered to enable users to automate their incident management and better protect their information systems.

BruteForceBlocker Overview

Danger.rulez.sk’s BruteForceBlocker is an easy-to-use, simple, and effective tool. It’s a Perl script working along with pf (a firewall developed by the OpenBSD team).

Its primary purpose is to block SSH brute-force attacks via your firewall and, thanks to a failed login attempts counter.

When this script is running, it checks sshd logs from Syslog, looks for Failed Login attempts – mostly some script attacks, and counts the number of such attempts.

When the given IP reaches configured limit of fails,  Brute Force Blocker’s script puts this IP to the pf’s table and blocks any other traffic coming from the given IP (This also depends on your configuration in pf.conf).

Since the 1.2 version, it’s also possible to report blocked IPs to the project site and share your information with other users.

By integrating with BruteForceBlocker, Mindflow allows users to block unwanted IPs and access an IP list continuously updated by the community.

Benefits

• Unwanted IPs brute force blocker
  
• Access to a community-resourced IP list