BlockHosts is a Python system tool for Linux that blocks IP Addresses based on information gleaned from scanning system logs. It updates a hosts blockfile (such as hosts.deny) automatically, to block IP addresses. It will also expire previously blocked addresses based on age of last failed login attempt, this keeps the blockfile size manageable.

PropertyValue
dbpedia-owl:Work#genre
p:abstract
  • BlockHosts is a Python system tool for Linux that blocks IP Addresses based on information gleaned from scanning system logs. It updates a hosts blockfile (such as hosts.deny) automatically, to block IP addresses. It will also expire previously blocked addresses based on age of last failed login attempt, this keeps the blockfile size manageable. In addition to hosts.allow TCP wrappers blocking, it can also execute iptables or ip route commands to block all TCP/IP network traffic from an address, so all services, even those that do not run under TCP wrappers, can be protected. Also available: an email notification facility, as well as an RSS feed exporting the list of blocked addresses. Contributed extensions include web scripts for intrusion source and location mashup displaying a geographic map of the blocked IP addresses. The patterns used to scan system logs are extendable; out-of-the-box it comes with patterns to recognize OpenSSH, ProFTPd, vsftpd, Pure-FTPd, and a few other services. All these use TCP wrappers, but blockhosts can also be extended to match patterns in non-TCP-wrappers services such as the web server Apache HTTP Server, by blocking IP addresses using null routing or packet filtering techniques. (en)
p:caption
  • BlockHosts (en)
p:developer
  • Avinash Chopde (en)
p:genre
p:hasPhotoCollection
p:latestReleaseDate
  • 2008-06-17 (xsd:date)
p:latestReleaseVersion
  • 2.4 (xsd:double)
p:license
  • Public Domain (en)
p:name
  • BlockHosts (en)
p:operatingSystem
p:reference
p:website
p:wikiPageUsesTemplate
p:wordnet_type
rdf:type
rdfs:comment
  • BlockHosts is a Python system tool for Linux that blocks IP Addresses based on information gleaned from scanning system logs. It updates a hosts blockfile (such as hosts.deny) automatically, to block IP addresses. It will also expire previously blocked addresses based on age of last failed login attempt, this keeps the blockfile size manageable. (en)
rdfs:label
  • BlockHosts (en)
skos:subject
foaf:homepage
foaf:page