Verify Fail2Ban SSH monitoring and banning behavior

Verify Fail2Ban SSH monitoring and banning behavior

• Test case designer: name
• Date of creation : 24.07.2025

Update history

• version 0.2 - 11.08.2025 - Edited steps
• version 0.1 - 02.07.2025 - test case created

Test case description

Confirm Fail2Ban monitors SSH and bans IPs after N failed attempts within the configured window.

Pre-state:

• Fail2Ban configured.

Test Steps

1. Verify configuration.
2. Observe if the IP is banned.
3. Check the reason for the IP address ban being triggered.

Expected result

• Fail2Ban detects repeated failed SSH login attempts.
• The offending IP is banned and cannot SSH into the server during the ban period.
• After the ban period, the IP is automatically unbanned.