Re: syslogd: Remote Logging busted?

From: Larry Rosenman <ler_at_lerctr.org>
Date: Fri, 28 Oct 2011 22:37:41 -0500 (CDT)
On Fri, 28 Oct 2011, Kevin Oberman wrote:

> On Fri, Oct 28, 2011 at 7:22 PM, Larry Rosenman <ler_at_lerctr.org> wrote:
>>
>> I enabled remote logging for my home subnet, and syslogd doesn't seem(!) to
>> be logging the messages.
>>
>> They ARE making it to the system.
>>
>> Can someone look at bin/162135 which has all the details, including
>> tcpdump to show that the messages are making it to the system.
>
> Just to be clear, you are running tcpdump on borg, right? The
> statement "This is from my Cable Modem:" confuses me a bit.
Yes, the tcpdump is running on borg, and the source of the syslog packets
is from my Cable Modem at 192.168.200.10.

/etc/hosts.allow:

#
# hosts.allow access control file for "tcp wrapped" applications.
# $FreeBSD: src/etc/hosts.allow,v 1.23 2006/08/29 09:20:48 ru Exp $
#
# NOTE: The hosts.deny file is deprecated.
#       Place both 'allow' and 'deny' rules in the hosts.allow file.
#	See hosts_options(5) for the format of this file.
#	hosts_access(5) no longer fully applies.

#	 _____                                      _          _
#	| ____| __  __   __ _   _ __ ___    _ __   | |   ___  | |
#	|  _|   \ \/ /  / _` | | '_ ` _ \  | '_ \  | |  / _ \ | |
#	| |___   >  <  | (_| | | | | | | | | |_) | | | |  __/ |_|
#	|_____| /_/\_\  \__,_| |_| |_| |_| | .__/  |_|  \___| (_)
#					   |_|
# !!! This is an example! You will need to modify it for your specific
# !!! requirements!


# Start by allowing everything (this prevents the rest of the file
# from working, so remove it when you need protection).
# The rules here work on a "First match wins" basis.
#ALL : ALL : allow

# Wrapping sshd(8) is not normally a good idea, but if you
# need to do it, here's how
#sshd : .evil.cracker.example.com : deny

# Protect against simple DNS spoofing attacks by checking that the
# forward and reverse records for the remote host match. If a mismatch
# occurs, access is denied, and any positive ident response within
# 20 seconds is logged. No protection is afforded against DNS poisoning,
# IP spoofing or more complicated attacks. Hosts with no reverse DNS
# pass this rule.
ALL : PARANOID : RFC931 20 : deny

# Allow anything from localhost.  Note that an IP address (not a host
# name) *MUST* be specified for rpcbind(8).
ALL : localhost 127.0.0.1 : allow
# Comment out next line if you build libwrap without IPv6 support.
ALL : [::1] : allow
#ALL : my.machine.example.com 192.0.2.35 : allow

# To use IPv6 addresses you must enclose them in []'s
#ALL : [fe80::%fxp0]/10 : allow
#ALL : [fe80::]/10 : deny
#ALL : [2001:db8:2:1:2:3:4:3fe1] : deny
#ALL : [2001:db8:2:1::]/64 : allow

# Sendmail can help protect you against spammers and relay-rapers
#sendmail : localhost : allow
#sendmail : .nice.guy.example.com : allow
#sendmail : .evil.cracker.example.com : deny
#sendmail : ALL : allow

# Exim is an alternative to sendmail, available in the ports tree
exim : localhost : allow
#exim : .nice.guy.example.com : allow
#exim : .evil.cracker.example.com : deny
exim : ALL : allow

# Rpcbind is used for all RPC services; protect your NFS!
# (IP addresses rather than hostnames *MUST* be used here)
#rpcbind : 192.0.2.32/255.255.255.224 : allow
#rpcbind : 192.0.2.96/255.255.255.224 : allow
rpcbind : ALL : deny

# NIS master server. Only local nets should have access
# (Since this is an RPC service, rpcbind needs to be considered)
ypserv : localhost : allow
#ypserv : .unsafe.my.net.example.com : deny
#ypserv : .my.net.example.com : allow
ypserv : ALL : deny

# Provide a small amount of protection for ftpd
ftpd : localhost : allow
#ftpd : .nice.guy.example.com : allow
#ftpd : .evil.cracker.example.com : deny
ftpd : ALL : allow

# You need to be clever with finger; do _not_ backfinger!! You can easily
# start a "finger war".
fingerd : ALL \
 	: spawn (echo Finger. | \
 	 /usr/bin/mail -s "tcpd\: %u_at_%h[%a] fingered me!" root) & \
 	: deny

# The rest of the daemons are protected.
#ALL : ALL \
#	: severity auth.info \
#	: twist /bin/echo "You are not welcome to use %d from %h."
# Added by SSHBlock [Sat Oct 22 00:10:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:10:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:10:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:10:58 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:08 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:19 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:36 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:40 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:56 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:11:58 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:08 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:19 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:32 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:34 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:36 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:43 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:53 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:12:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:30 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:35 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:37 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:47 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:51 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:53 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:13:58 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:05 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:08 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:11 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:17 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:20 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:22 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:30 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:32 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:34 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:36 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:51 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:56 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:14:59 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:11 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:19 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:35 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:40 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:47 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:56 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:15:59 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:08 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:11 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:20 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:22 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:25 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:27 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:27 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:32 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:34 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:36 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:53 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:16:58 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:17 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:19 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:22 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:36 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:40 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:43 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:17:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 00:18:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 58.20.110.21 : deny
# Added by SSHBlock [Sat Oct 22 14:48:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:48:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:49:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:51:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:52:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:52:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:52:43 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:53:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:54:15 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:54:43 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:55:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:55:35 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:56:14 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:56:40 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:56:58 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:57:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:57:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:57:51 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:58:16 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:58:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:59:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 14:59:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:00:05 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:00:21 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:00:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:00:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:01:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:01:27 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:01:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:02:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:02:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:02:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:03:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:03:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:03:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:03:56 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:04:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:04:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:04:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:05:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:05:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:05:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:06:04 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:06:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:06:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:07:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:07:25 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:07:47 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:08:11 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:08:27 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:08:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:09:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:09:17 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:09:32 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:09:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:10:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:10:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:10:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:11:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:11:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:11:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:11:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:12:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:12:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:12:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:12:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:13:17 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:13:32 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:13:46 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:14:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:14:22 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:14:38 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:14:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:15:08 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:15:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:15:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:16:00 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:16:51 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:17:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:17:20 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:17:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:18:38 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:18:53 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:19:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:19:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:20:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:20:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:21:05 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:21:22 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:22:20 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:22:54 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:23:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:23:30 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:23:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:24:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:24:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:25:12 2011]
# 10 break-in attempts in 60 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:25:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:25:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:26:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:26:27 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:26:51 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:27:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:27:24 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:29:02 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:29:17 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:29:34 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:30:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:30:25 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:30:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:31:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:31:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:31:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:31:59 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:32:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:32:31 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:32:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:33:06 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:33:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:33:45 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sat Oct 22 15:34:01 2011]
# 5 break-in attempts in 15 seconds:
sshd : 220.227.158.106 : deny
# Added by SSHBlock [Sun Oct 23 09:58:42 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 09:59:07 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 09:59:23 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 09:59:41 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 10:00:34 2011]
# 10 break-in attempts in 60 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 10:00:49 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 10:01:14 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 10:01:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.31.110.201 : deny
# Added by SSHBlock [Sun Oct 23 12:10:05 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:10:15 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:10:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:10:37 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:10:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:11:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:11:13 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:11:28 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:11:59 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:12:12 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:12:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:12:40 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:12:57 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:13:09 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:13:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:13:37 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:13:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:14:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:14:19 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:14:33 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:14:44 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:14:55 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:15:05 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:15:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:15:29 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:15:39 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 12:15:52 2011]
# 5 break-in attempts in 15 seconds:
sshd : 60.191.221.184 : deny
# Added by SSHBlock [Sun Oct 23 14:15:50 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Sun Oct 23 14:20:03 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Sun Oct 23 14:20:10 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Sun Oct 23 14:20:18 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Sun Oct 23 14:20:26 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Sun Oct 23 14:20:34 2011]
# 5 break-in attempts in 15 seconds:
sshd : 85.214.156.73 : deny
# Added by SSHBlock [Tue Oct 25 19:43:23 2011]
# 10 break-in attempts in 60 seconds:
sshd : 58.56.147.146 : deny
# Added by SSHBlock [Fri Oct 28 11:37:48 2011]
# 5 break-in attempts in 15 seconds:
sshd : 61.236.182.11 : deny
# Added by SSHBlock [Fri Oct 28 18:46:53 2011]
# 5 break-in attempts in 15 seconds:
sshd : 121.207.230.69 : deny
>
> Assuming tcpdump is on borg, it is making past any firewall (pf or
> ipfw, at least). What about /etc/hosts.allow? I don't recall if it
> filters before or after pcap see packets. I used to have a diagram
> showing the sequence of processing this, but I can't seem to find it
> now.
>
> What does "netstat -af inet | grep syslog" show? Is syslogd actually listening?


the netstat output: 
udp4       0      0 *.syslog               *.*

and sockstat | grep syslog: 
root     syslogd    65128 4  dgram  /var/run/log
root     syslogd    65128 5  dgram  /var/run/logpriv
root     syslogd    65128 6  udp6   *:514                 *:*
root     syslogd    65128 7  udp4   *:514                 *:*
>

-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 512-248-2683                 E-Mail: ler_at_lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
Received on Sat Oct 29 2011 - 01:37:53 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:19 UTC