src/etc/periodic/security/800.loginfail

From: Dmitry Pryanishnikov <dmitry_at_atlantis.dp.ua>
Date: Thu, 16 Mar 2006 15:03:08 +0200 (EET)
Hello!

  I've noticed the recent addition in this file in order to detect
"(fail|invalid|bad|illegal)" in auth.log files. I wonder would it be useful
to also detect SSH.COM's server "Refusing connection" messages here. They have 
the following format:

Mar 16 14:56:55 test3 sshd2[74522]: Refusing connection from "192.168.1.145". 
Too many open connections (max 2, now open 2).


Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry_at_atlantis.dp.ua
nic-hdl: LYNX-RIPE
Received on Thu Mar 16 2006 - 12:03:20 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:53 UTC