[PLUG] denyhosts not blocking some ssh attempts

Galen Seitz galens at seitzassoc.com
Mon Jan 12 22:21:10 UTC 2009


I've got someone making ssh attempts every three seconds or so. 
Denyhosts is up and running, and has even added someone to 
/etc/hosts.deny today.  I tried restarting denyhosts, but this 
particular IP is still not getting added to /etc/hosts.deny.  Has 
anyone else seen this?  Here's the tail end of /var/log/secure

Jan 12 14:20:44 zinc sshd[10329]: Received disconnect from 
208.110.91.226: 11: Bye Bye
Jan 12 14:20:45 zinc sshd[10333]: Received disconnect from 
208.110.91.226: 11: Bye Bye
Jan 12 14:20:48 zinc sshd[10338]: Received disconnect from 
208.110.91.226: 11: Bye Bye
Jan 12 14:20:51 zinc sshd[10342]: Received disconnect from 
208.110.91.226: 11: Bye Bye


-- 
Galen Seitz
galens at seitzassoc.com



More information about the PLUG mailing list