Hello,
Just finished installing deny hosts and started it without a problem. I’ve
used the Regex that was on the FAQ page noticed that it does not work. I’m
hoping someone with more knowledge will find some time to help me out. I’ve
attached a snippet form /var/log/system.log
This is the regex that i’m using now
SSHD_FORMAT_REGEX=.* \[Sender sshd\] \[PID \d*\] \[Message .* PAM:
(?P<message>.*?)\].*?
Oct 29 13:57:29 serveme.private sshd[61126]: input_userauth_request: invalid
user EHLO [preauth]
Oct 29 13:57:29 serveme.private sshd[61126]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:29 serveme.private sshd[61128]: Invalid user DATA from
162.243.136.130
Oct 29 13:57:29 serveme.private sshd[61128]: input_userauth_request: invalid
user DATA [preauth]
Oct 29 13:57:29 serveme.private sshd[61128]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:29 serveme.private sshd[61130]: Invalid user 8BITMIME from
162.243.136.130
Oct 29 13:57:29 serveme.private sshd[61130]: input_userauth_request: invalid
user 8BITMIME [preauth]
Oct 29 13:57:29 serveme.private sshd[61130]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:29 serveme.private sshd[61132]: Invalid user OK from
162.243.136.130
Oct 29 13:57:29 serveme.private sshd[61132]: input_userauth_request: invalid
user OK [preauth]
Oct 29 13:57:29 serveme.private sshd[61132]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:30 serveme.private sshd[61134]: Invalid user END from
162.243.136.130
Oct 29 13:57:30 serveme.private sshd[61134]: input_userauth_request: invalid
user END [preauth]
Oct 29 13:57:30 serveme.private sshd[61134]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:30 serveme.private sshd[61136]: Invalid user TLS from
162.243.136.130
Oct 29 13:57:30 serveme.private sshd[61136]: input_userauth_request: invalid
user TLS [preauth]
Oct 29 13:57:30 serveme.private sshd[61136]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:30 serveme.private sshd[61138]: Invalid user POP3 from
162.243.136.130
Oct 29 13:57:30 serveme.private sshd[61138]: input_userauth_request: invalid
user POP3 [preauth]
Oct 29 13:57:30 serveme.private sshd[61138]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Oct 29 13:57:30 serveme.private sshd[61140]: Invalid user error from
162.243.136.130
Oct 29 13:57:30 serveme.private sshd[61140]: input_userauth_request: invalid
user error [preauth]
Oct 29 13:57:30 serveme.private sshd[61140]: Received disconnect from
162.243.136.130: 11: Bye Bye [preauth]
Thank you.
--
Luke T
------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
_______________________________________________
Denyhosts-user mailing list
Denyhosts-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/denyhosts-user
