Security Related

Security Related

################################
Troubleshooting
################################
# get current public ip
http://whatismyip.akamai.com/

# MTR
https://www.digitalocean.com/community/tutorials/how-to-use-traceroute-and-mtr-to-diagnose-network-issues
http://winmtr.net/

################################
# Login attempts
################################
# aureport used to get log info from /var/log/audit/audit.log
# summmary report starting at a date... --start and --end can be used in any aureport commands...
aureport --start 10/27/2016

# success auth
ureport -au --success

# failed auth
ureport -au --failed

# successful login
last

# failed login, filter on root user
last root

# failed login
lastb

# failed login, filter on root user
lastb root

# last 20 failed login
lastb -n 20

################################
fail2ban
################################
# documentation
# http://www.fail2ban.org/wiki/index.php/Commands


# get jail names
sudo fail2ban-client status

# list ip banned for iptables
sudo iptables -L -n

# list ip banned via fail2ban (required for firewalld)
sudo fail2ban-client status JAIL_NAME
sudo fail2ban-client status sshd

# ban IP
sudo fail2ban-client set sshd banip IPADDRESS

#unban IP
sudo fail2ban-client set sshd unbanip IPADDRESS