Re: [Sshguard-users] OS X 10.10 (Yosemite) and "authentication error for <user> from <ip> via <ip>"

[Bradley G. <pi...@ma...>]

On Feb 2, 2015, at 11:05 AM, Barry Muldrey <bmu...@ga...> wrote:

> sshd is producing the following in my system.log:
> 
>     Feb  2 13:45:59 myhost.local sshd[8027]: error: PAM: authentication error for root from 115.239.228.9 via 10.0.1.100
> 
> sshguard is not recognizing the threat (debug output below).
> If I submit the following, the attack is recognized:
> 
>     Feb  2 13:45:59 myhost.local sshd[8027]: error: PAM: authentication error for root from 115.239.228.9
> 
> (please note "Error: popping nterm text ()" at the end of parser output...)
> 
> Ideas, anyone??

I'm seeing the same thing. No answer but your not alone.

Regards,
Bradley Giesbrecht (pixilla)