Re: [Sshguard-users] How to read sshguard log messages - what does "x danger" mean?

[Mij <mi...@ss...>]

Hi Benedikt,

> 40 danger in 4 attacks over 9 seconds (all: 40d in 1 abuses over 9s).

> So what does the "40 danger" mean in this context and what is it derived from?

The attack performed 4 times by the attacker had danger 10. So danger 40 was scored,
and the "abuse" threshold was reached.
This attacker was blocked for the first time, so it historically scored 40 danger in 1 abuse.

For more details see http://www.sshguard.net/docs/terminology/

michele