How to stop failed login attempts by a domain

Michael Howey asked:

I’m getting a ton of bruteforce attacks today from a domain rather then an IP. I tracked down the websites IP address and blocked it but I am still getting the bruteforce warnings. Can I some how use iptables to block a domain name?

alumni.xjtu.edu.cn

My answer:


Use a tool like fail2ban to automatically detect and ban these brute-force login attempts.


View the full question and answer on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.