[Bug 1628926] Re: Postpone login attempts if X successive attempts have failed

[ChristianEhrhardt]

Hi,
those two cover pretty much what you want to achieve I think:
https://ubuntuforums.org/showthread.php?t=1409993
https://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/

** Changed in: openssh (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1628926

Title:
  Postpone login attempts if X successive attempts have failed

Status in openssh package in Ubuntu:
  Incomplete

Bug description:
  ** This is a feature request that regards to security. **

  Please add to the login method a mechanism that postpones successive
  login attempts if X attempts have failed.

  Obviously this can be further enhanced - for example:
  If X successive login attempts failed, then disable that specific login method for that specific user for Y minutes.
  If Y minutes have passed and the additional successive attempts failed again - then disable that specific login method for that specific user for 2*Y minutes.
  And so on... 

  Values of X and Y should be configured by the 'root' user.

  Benefits: greatly reduces the risk of remotely brute-forcing the
  password.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1628926/+subscriptions