Skip to main content

Blocked IPs (blocked_ips.json)

blocked_ips.json stores source IP addresses that are persistently blocked, typically after repeated failed authentication attempts.

Example​

{
  "blocked": [
    "192.168.1.12",
    "10.0.0.7"
  ]
}

Behavior​

  • Failed logins are evaluated against max_auth_attempts in server_config.json
  • Offending source IPs can be added to the blocked list
  • The list persists across restarts through JSON storage
  • Detailed failed attempts are also recorded in invalid_logins.log

Operational Tips​

  • Review blocked entries regularly during active attacks
  • Remove false positives carefully after verification
  • Combine IP blocking with strong passwords and non-default ports