Doug Niven wrote: > Hi Folks, > > I'm seeing the following type of attempts on my server, I.e. someone from the > same IP address/host trying various usernames until deny hosts finally locks > them out. > > Is there a minor tweak I should make to my denyhosts.cfg file that will cut > them off in future attempts? > > Denyhosts is working great, but I'd just like to harden it a little bit. > > Thanks! > > Doug > > Jul 1 10:29:13 example-test sshd[8863]: Accepted keyboard-interactive/pam > for sixpack from 63.249.85.38 port 41722 ssh2 > Jul 1 10:29:17 example-test sshd[8870]: Received disconnect from > 62.249.85.68: 11: disconnected by user > Jul 1 11:43:58 example-test sshd[9104]: Received disconnect from > 222.184.230.118: 11: Bye Bye > Jul 1 11:44:00 example-test sshd[9109]: Received disconnect from > 222.184.230.118: 11: Bye Bye > Jul 1 11:44:01 example-test sshd[9111]: Invalid user gamme from > 222.184.230.118 > Jul 1 11:44:01 example-test sshd[9112]: input_userauth_request: invalid user > gamme > Jul 1 11:44:01 example-test sshd[9112]: Received disconnect from > 222.184.230.118: 11: Bye Bye
Hi Doug, Let's start with which operating system you're on in how you downloaded/installed denyhosts. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Denyhosts-user mailing list Denyhosts-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/denyhosts-user
