From: Jeff W. <wi...@pu...> - 2014-02-14 15:58:05
|
Has any else seen this - sshguard will indicate that the blocking is ">0secs", and the block doesn't go away until sshguard is restarted? The log line looks like: Feb 14 01:22:40 mymachine.purdue.edu sshguard[8951]: [ID 702911 auth.notice] Blocking nnn.nnn.nnn.nnn:4 for >0secs: 60 danger in 2 attacks over 2 seconds (all: 120d in 2 abuses over 85461s). -- Jeff Wieland | Purdue University Network Systems Administrator | ITIS UNIX Platforms Voice: (765)496-8234 | 155 S. Grant Street FAX: (765)494-6620 | West Lafayette, IN 47907 |