On Mon, 15 Dec 2014, Steven Jones wrote: > Hi,
> I seem to have some brute force root attacks beating fail2ban, > Just as a selection, these are clearly more than 5 failures, hundreds get > through over night, > Have I missed a setting? or something else? don't "steal" the unrelated thread please. make sure that fail2ban is still running (may be got killed?) and then proceed to http://www.fail2ban.org/wiki/index.php/HOWTO_Seek_Help esp 3.x items > ====== > 8><------- > Dec 16 08:28:58 vuwuniconnect01 sshd[3065]: Failed password for root from > 23.97.163.146 port 1105 ssh2 > Dec 16 08:28:59 vuwuniconnect01 sshd[3065]: Received disconnect from > 23.97.163.146: 11: Bye Bye [preauth] > Dec 16 08:29:01 vuwuniconnect01 sshd[3068]: pam_unix(sshd:auth): > authentication failure; logname= uid=0 euid=0 tty=ssh ruser= > rhost=23.97.163.146 user=root > Dec 16 08:29:04 vuwuniconnect01 sshd[3068]: Failed password for root from > 23.97.163.146 port 1128 ssh2 > Dec 16 08:29:04 vuwuniconnect01 sshd[3068]: Received disconnect from > 23.97.163.146: 11: Bye Bye [preauth] > Dec 16 08:29:08 vuwuniconnect01 sshd[3071]: pam_unix(sshd:auth): > authentication failure; logname= uid=0 euid=0 tty=ssh ruser= > rhost=23.97.163.146 user=root > Dec 16 08:29:10 vuwuniconnect01 sshd[3071]: Failed password for root from > 23.97.163.146 port 1129 ssh2 > Dec 16 08:29:13 vuwuniconnect01 sshd[3075]: pam_unix(sshd:auth): > authentication failure; logname= uid=0 euid=0 tty=ssh ruser= > rhost=23.97.163.146 user=root -- Yaroslav O. Halchenko, Ph.D. http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org Research Scientist, Psychological and Brain Sciences Dept. Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
