[PLUG] denyhosts not blocking some ssh attempts
Galen Seitz
galens at seitzassoc.com
Mon Jan 12 22:21:10 UTC 2009
I've got someone making ssh attempts every three seconds or so.
Denyhosts is up and running, and has even added someone to
/etc/hosts.deny today. I tried restarting denyhosts, but this
particular IP is still not getting added to /etc/hosts.deny. Has
anyone else seen this? Here's the tail end of /var/log/secure
Jan 12 14:20:44 zinc sshd[10329]: Received disconnect from
208.110.91.226: 11: Bye Bye
Jan 12 14:20:45 zinc sshd[10333]: Received disconnect from
208.110.91.226: 11: Bye Bye
Jan 12 14:20:48 zinc sshd[10338]: Received disconnect from
208.110.91.226: 11: Bye Bye
Jan 12 14:20:51 zinc sshd[10342]: Received disconnect from
208.110.91.226: 11: Bye Bye
--
Galen Seitz
galens at seitzassoc.com
More information about the PLUG
mailing list