fail2ban ssh 차단 실패???

머지??

도대체 어떻게 차단되었는데 또 ssh로 접속을 하는거야?!?!?

혹시.. 차단되기 전에 동시에 세션 몇십개 열어두고 순차적으로 시도해서 끊어지던 말던

연결된것들 까진 차단 안되니 그렇게 하는건가?

720 2017-03-01 02:18:17,757 fail2ban.actions[1253]: WARNING [ssh] Ban 117.179.164.237 721 2017-03-01 02:18:26,883 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 722 2017-03-01 02:18:35,897 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 723 2017-03-01 02:18:53,922 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 724 2017-03-01 02:19:03,936 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 725 2017-03-01 02:19:14,952 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 726 2017-03-01 02:19:24,966 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 727 2017-03-01 02:19:34,981 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned 728 2017-03-01 02:19:43,995 fail2ban.actions[1253]: INFO    [ssh] 117.179.164.237 already banned

엥? 차단 되었는데 어떻게 계속 접속하지?!?! 머지?!?!

8438 Mar  1 02:18:08 raspberrypi sshd[10320]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8439 Mar  1 02:18:08 raspberrypi sshd[10320]: input_userauth_request: invalid user root [preauth] 8440 Mar  1 02:18:08 raspberrypi sshd[10320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8441 Mar  1 02:18:11 raspberrypi sshd[10320]: Failed password for invalid user root from 117.179.164.237 port 22077 ssh2 8442 Mar  1 02:18:13 raspberrypi sshd[10320]: Failed password for invalid user root from 117.179.164.237 port 22077 ssh2 8443 Mar  1 02:18:15 raspberrypi sshd[10320]: Failed password for invalid user root from 117.179.164.237 port 22077 ssh2 8444 Mar  1 02:18:17 raspberrypi sshd[10320]: Failed password for invalid user root from 117.179.164.237 port 22077 ssh2 8445 Mar  1 02:18:19 raspberrypi sshd[10320]: Failed password for invalid user root from 117.179.164.237 port 22077 ssh2 8446 Mar  1 02:18:19 raspberrypi sshd[10320]: fatal: Read from socket failed: Connection reset by peer [preauth] 8447 Mar  1 02:18:19 raspberrypi sshd[10320]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8448 Mar  1 02:18:19 raspberrypi sshd[10320]: PAM service(sshd) ignoring max retries; 5 > 3 8449 Mar  1 02:18:20 raspberrypi sshd[10336]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8450 Mar  1 02:18:20 raspberrypi sshd[10336]: input_userauth_request: invalid user root [preauth] 8451 Mar  1 02:18:20 raspberrypi sshd[10336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8452 Mar  1 02:18:22 raspberrypi sshd[10336]: Failed password for invalid user root from 117.179.164.237 port 21532 ssh2 8453 Mar  1 02:18:24 raspberrypi sshd[10336]: Failed password for invalid user root from 117.179.164.237 port 21532 ssh2 8454 Mar  1 02:18:26 raspberrypi sshd[10336]: Failed password for invalid user root from 117.179.164.237 port 21532 ssh2 8455 Mar  1 02:18:28 raspberrypi sshd[10336]: Failed password for invalid user root from 117.179.164.237 port 21532 ssh2 8456 Mar  1 02:18:30 raspberrypi sshd[10336]: Failed password for invalid user root from 117.179.164.237 port 21532 ssh2 8457 Mar  1 02:18:30 raspberrypi sshd[10336]: fatal: Read from socket failed: Connection reset by peer [preauth] 8458 Mar  1 02:18:30 raspberrypi sshd[10336]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8459 Mar  1 02:18:30 raspberrypi sshd[10336]: PAM service(sshd) ignoring max retries; 5 > 3 8460 Mar  1 02:18:31 raspberrypi sshd[10344]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8461 Mar  1 02:18:31 raspberrypi sshd[10344]: input_userauth_request: invalid user root [preauth] 8462 Mar  1 02:18:31 raspberrypi sshd[10344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8463 Mar  1 02:18:33 raspberrypi sshd[10344]: Failed password for invalid user root from 117.179.164.237 port 21892 ssh2 8464 Mar  1 02:18:35 raspberrypi sshd[10344]: Failed password for invalid user root from 117.179.164.237 port 21892 ssh2 8465 Mar  1 02:18:37 raspberrypi sshd[10344]: Failed password for invalid user root from 117.179.164.237 port 21892 ssh2 8466 Mar  1 02:18:39 raspberrypi sshd[10344]: Failed password for invalid user root from 117.179.164.237 port 21892 ssh2 8467 Mar  1 02:18:42 raspberrypi sshd[10344]: Failed password for invalid user root from 117.179.164.237 port 21892 ssh2 8468 Mar  1 02:18:42 raspberrypi sshd[10344]: fatal: Read from socket failed: Connection reset by peer [preauth] 8469 Mar  1 02:18:42 raspberrypi sshd[10344]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8470 Mar  1 02:18:42 raspberrypi sshd[10344]: PAM service(sshd) ignoring max retries; 5 > 3 8471 Mar  1 02:18:52 raspberrypi sshd[10352]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8472 Mar  1 02:18:52 raspberrypi sshd[10352]: input_userauth_request: invalid user root [preauth] 8473 Mar  1 02:18:52 raspberrypi sshd[10352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8474 Mar  1 02:18:53 raspberrypi sshd[10352]: Failed password for invalid user root from 117.179.164.237 port 21949 ssh2 8475 Mar  1 02:18:55 raspberrypi sshd[10352]: Failed password for invalid user root from 117.179.164.237 port 21949 ssh2 8476 Mar  1 02:18:57 raspberrypi sshd[10352]: Failed password for invalid user root from 117.179.164.237 port 21949 ssh2 8477 Mar  1 02:18:59 raspberrypi sshd[10352]: Failed password for invalid user root from 117.179.164.237 port 21949 ssh2 8478 Mar  1 02:19:01 raspberrypi sshd[10352]: Failed password for invalid user root from 117.179.164.237 port 21949 ssh2 8479 Mar  1 02:19:01 raspberrypi sshd[10352]: fatal: Read from socket failed: Connection reset by peer [preauth] 8480 Mar  1 02:19:01 raspberrypi sshd[10352]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8481 Mar  1 02:19:01 raspberrypi sshd[10352]: PAM service(sshd) ignoring max retries; 5 > 3 8482 Mar  1 02:19:02 raspberrypi sshd[10361]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8483 Mar  1 02:19:02 raspberrypi sshd[10361]: input_userauth_request: invalid user root [preauth] 8484 Mar  1 02:19:02 raspberrypi sshd[10361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8485 Mar  1 02:19:05 raspberrypi sshd[10361]: Failed password for invalid user root from 117.179.164.237 port 22141 ssh2 8486 Mar  1 02:19:07 raspberrypi sshd[10361]: Failed password for invalid user root from 117.179.164.237 port 22141 ssh2 8487 Mar  1 02:19:09 raspberrypi sshd[10361]: Failed password for invalid user root from 117.179.164.237 port 22141 ssh2 8488 Mar  1 02:19:11 raspberrypi sshd[10361]: Failed password for invalid user root from 117.179.164.237 port 22141 ssh2 8489 Mar  1 02:19:14 raspberrypi sshd[10361]: Failed password for invalid user root from 117.179.164.237 port 22141 ssh2 8490 Mar  1 02:19:14 raspberrypi sshd[10361]: fatal: Read from socket failed: Connection reset by peer [preauth] 8491 Mar  1 02:19:14 raspberrypi sshd[10361]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8492 Mar  1 02:19:14 raspberrypi sshd[10361]: PAM service(sshd) ignoring max retries; 5 > 3  8493 Mar  1 02:19:15 raspberrypi sshd[10369]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8494 Mar  1 02:19:15 raspberrypi sshd[10369]: input_userauth_request: invalid user root [preauth] 8495 Mar  1 02:19:15 raspberrypi sshd[10369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8496 Mar  1 02:19:17 raspberrypi sshd[10369]: Failed password for invalid user root from 117.179.164.237 port 21735 ssh2 8497 Mar  1 02:19:19 raspberrypi sshd[10369]: Failed password for invalid user root from 117.179.164.237 port 21735 ssh2 8498 Mar  1 02:19:21 raspberrypi sshd[10369]: Failed password for invalid user root from 117.179.164.237 port 21735 ssh2 8499 Mar  1 02:19:24 raspberrypi sshd[10369]: Failed password for invalid user root from 117.179.164.237 port 21735 ssh2 8500 Mar  1 02:19:26 raspberrypi sshd[10369]: Failed password for invalid user root from 117.179.164.237 port 21735 ssh2 8501 Mar  1 02:19:26 raspberrypi sshd[10369]: fatal: Read from socket failed: Connection reset by peer [preauth] 8502 Mar  1 02:19:26 raspberrypi sshd[10369]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8503 Mar  1 02:19:26 raspberrypi sshd[10369]: PAM service(sshd) ignoring max retries; 5 > 3 8504 Mar  1 02:19:27 raspberrypi sshd[10377]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8505 Mar  1 02:19:27 raspberrypi sshd[10377]: input_userauth_request: invalid user root [preauth] 8506 Mar  1 02:19:27 raspberrypi sshd[10377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8507 Mar  1 02:19:29 raspberrypi sshd[10377]: Failed password for invalid user root from 117.179.164.237 port 21863 ssh2 8508 Mar  1 02:19:31 raspberrypi sshd[10377]: Failed password for invalid user root from 117.179.164.237 port 21863 ssh2 8509 Mar  1 02:19:34 raspberrypi sshd[10377]: Failed password for invalid user root from 117.179.164.237 port 21863 ssh2 8510 Mar  1 02:19:35 raspberrypi sshd[10377]: Failed password for invalid user root from 117.179.164.237 port 21863 ssh2 8511 Mar  1 02:19:38 raspberrypi sshd[10377]: Failed password for invalid user root from 117.179.164.237 port 21863 ssh2 8512 Mar  1 02:19:38 raspberrypi sshd[10377]: fatal: Read from socket failed: Connection reset by peer [preauth] 8513 Mar  1 02:19:38 raspberrypi sshd[10377]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8514 Mar  1 02:19:38 raspberrypi sshd[10377]: PAM service(sshd) ignoring max retries; 5 > 3 8515 Mar  1 02:19:39 raspberrypi sshd[10386]: User root from 117.179.164.237 not allowed because listed in DenyUsers 8516 Mar  1 02:19:39 raspberrypi sshd[10386]: input_userauth_request: invalid user root [preauth] 8517 Mar  1 02:19:39 raspberrypi sshd[10386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8518 Mar  1 02:19:41 raspberrypi sshd[10386]: Failed password for invalid user root from 117.179.164.237 port 21996 ssh2 8519 Mar  1 02:19:43 raspberrypi sshd[10386]: Failed password for invalid user root from 117.179.164.237 port 21996 ssh2 8520 Mar  1 02:19:45 raspberrypi sshd[10386]: Failed password for invalid user root from 117.179.164.237 port 21996 ssh2 8521 Mar  1 02:19:48 raspberrypi sshd[10386]: Failed password for invalid user root from 117.179.164.237 port 21996 ssh2 8522 Mar  1 02:19:48 raspberrypi sshd[10386]: fatal: Read from socket failed: Connection reset by peer [preauth] 8523 Mar  1 02:19:48 raspberrypi sshd[10386]: PAM 3 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.179.164.237  user=root 8524 Mar  1 02:19:48 raspberrypi sshd[10386]: PAM service(sshd) ignoring max retries; 4 > 3

753 2017-03-04 19:45:18,761 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned 754 2017-03-04 19:45:21,767 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned 755 2017-03-04 19:45:26,777 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned 756 2017-03-04 19:45:28,781 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned 757 2017-03-04 19:45:44,806 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned 758 2017-03-04 19:45:58,828 fail2ban.actions[1253]: INFO    [ssh] 122.171.39.147 already banned

938 Mar  4 19:45:11 raspberrypi sshd[30438]: User root from 122.171.39.147 not allowed because listed in DenyUsers  939 Mar  4 19:45:11 raspberrypi sshd[30438]: input_userauth_request: invalid user root [preauth]  940 Mar  4 19:45:11 raspberrypi sshd[30438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  941 Mar  4 19:45:13 raspberrypi sshd[30442]: User root from 122.171.39.147 not allowed because listed in DenyUsers  942 Mar  4 19:45:13 raspberrypi sshd[30442]: input_userauth_request: invalid user root [preauth]  943 Mar  4 19:45:13 raspberrypi sshd[30442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  944 Mar  4 19:45:13 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  945 Mar  4 19:45:14 raspberrypi sshd[30444]: User root from 122.171.39.147 not allowed because listed in DenyUsers  946 Mar  4 19:45:14 raspberrypi sshd[30444]: input_userauth_request: invalid user root [preauth]  947 Mar  4 19:45:14 raspberrypi sshd[30444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  948 Mar  4 19:45:15 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  949 Mar  4 19:45:16 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  950 Mar  4 19:45:16 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  951 Mar  4 19:45:18 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  952 Mar  4 19:45:18 raspberrypi sshd[30455]: User root from 122.171.39.147 not allowed because listed in DenyUsers  953 Mar  4 19:45:18 raspberrypi sshd[30455]: input_userauth_request: invalid user root [preauth]  954 Mar  4 19:45:18 raspberrypi sshd[30455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  955 Mar  4 19:45:18 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  956 Mar  4 19:45:18 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  957 Mar  4 19:45:20 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  958 Mar  4 19:45:20 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  959 Mar  4 19:45:20 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  960 Mar  4 19:45:20 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  961 Mar  4 19:45:23 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  962 Mar  4 19:45:23 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  963 Mar  4 19:45:23 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  964 Mar  4 19:45:24 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  965 Mar  4 19:45:25 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  966 Mar  4 19:45:26 raspberrypi sshd[30438]: Failed password for invalid user root from 122.171.39.147 port 50859 ssh2  967 Mar  4 19:45:26 raspberrypi sshd[30438]: Disconnecting: Too many authentication failures for invalid user root from 122.171.39.147 port 50859 ssh2 [preauth]  968 Mar  4 19:45:26 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  969 Mar  4 19:45:26 raspberrypi sshd[30438]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  970 Mar  4 19:45:26 raspberrypi sshd[30438]: PAM service(sshd) ignoring max retries; 6 > 3  971 Mar  4 19:45:26 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  972 Mar  4 19:45:28 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  973 Mar  4 19:45:28 raspberrypi sshd[30444]: Failed password for invalid user root from 122.171.39.147 port 50876 ssh2  974 Mar  4 19:45:28 raspberrypi sshd[30444]: Disconnecting: Too many authentication failures for invalid user root from 122.171.39.147 port 50876 ssh2 [preauth]  975 Mar  4 19:45:28 raspberrypi sshd[30444]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  976 Mar  4 19:45:28 raspberrypi sshd[30444]: PAM service(sshd) ignoring max retries; 6 > 3  977 Mar  4 19:45:28 raspberrypi sshd[30442]: Failed password for invalid user root from 122.171.39.147 port 50866 ssh2  978 Mar  4 19:45:28 raspberrypi sshd[30442]: Disconnecting: Too many authentication failures for invalid user root from 122.171.39.147 port 50866 ssh2 [preauth]  979 Mar  4 19:45:28 raspberrypi sshd[30442]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  980 Mar  4 19:45:28 raspberrypi sshd[30442]: PAM service(sshd) ignoring max retries; 6 > 3  981 Mar  4 19:45:30 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  982 Mar  4 19:45:32 raspberrypi sshd[30455]: Failed password for invalid user root from 122.171.39.147 port 50906 ssh2  983 Mar  4 19:45:32 raspberrypi sshd[30455]: Disconnecting: Too many authentication failures for invalid user root from 122.171.39.147 port 50906 ssh2 [preauth]  984 Mar  4 19:45:32 raspberrypi sshd[30455]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  985 Mar  4 19:45:32 raspberrypi sshd[30455]: PAM service(sshd) ignoring max retries; 6 > 3  986 Mar  4 19:45:42 raspberrypi sshd[30484]: User root from 122.171.39.147 not allowed because listed in DenyUsers  987 Mar  4 19:45:42 raspberrypi sshd[30484]: input_userauth_request: invalid user root [preauth]  988 Mar  4 19:45:42 raspberrypi sshd[30484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  989 Mar  4 19:45:44 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  990 Mar  4 19:45:47 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  991 Mar  4 19:45:50 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  992 Mar  4 19:45:52 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  993 Mar  4 19:45:55 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  994 Mar  4 19:45:58 raspberrypi sshd[30484]: Failed password for invalid user root from 122.171.39.147 port 51032 ssh2  995 Mar  4 19:45:58 raspberrypi sshd[30484]: Disconnecting: Too many authentication failures for invalid user root from 122.171.39.147 port 51032 ssh2 [preauth]  996 Mar  4 19:45:58 raspberrypi sshd[30484]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.171.39.147  user=root  997 Mar  4 19:45:58 raspberrypi sshd[30484]: PAM service(sshd) ignoring max retries; 6 > 3

+

[링크 : https://forums.gentoo.org/viewtopic-p-7521178.html]