Skip to main content

MongoDB

Create an SSH jail by creating the file /etc/fail2ban/jail.d/mongodb.local. Paste in the following config, adapt it to your needs

[mongo-auth]

enabled	= true
filter	= mongo-auth
logpath	= /var/log/mongodb/mongod.log
maxretry = 3
port	= 27017
banaction = iptables-multiport[name="mongo", port="27017"]

bantime = 86400
findtime = 300

Start and reload SSHD, and then add your jail

sudo fail2ban-client start
sudo fail2ban-client reload
sudo fail2ban-client add mongodb