FutureQuest, Inc. FutureQuest, Inc. FutureQuest, Inc.
Knowledgebase: telnet/SSH
SSH access blocked?
Posted on 22 June 2009 12:59 AM
Question:

I was using the wrong login information to access my account via SSH and I think I triggered a block. I'm sure I'm using the correct username and password now, but the message I get when trying to connect is "Connection refused". I've also tried using another SSH client and get the message "Connection reset by peer". Have I been blocked?

Answer:

FutureQuest does have a server protection in place that can result in blocking as a response to bad login attempts. This tool, SSH Guardian, is used to help combat SSH brute force login attempts in order to protect the server and resources from DoS (Denial of Service) attacks when storms of port scans are attempted against our servers. SSH Guardian is an automated process that tracks invalid login attempts by IP address. If a certain number (and/or type) of failed SSH logins occur on a server, then the IP address originating the logins is added to the firewall for that server and blocked.

More information about SSH Guardian is provided here:
"Cannot access services for my account"

Please send an email to Service@FutureQuest.net or visit the Service Desk, specifying the IP address you're trying to connect from and request that it be checked to see if it is indeed blocked.

You can determine your connecting IP by visiting:
http://www.FutureQuest.net/Support/whatismyip.php
or here:
http://whatismyip.com

Note: If you find yourself blocked and you do not remember attempting shell logins, it is possible your local machine has been compromised and we would suggest scanning it for malware.