[SSHGuard-users] Block after one attack

[<mai...@ne...>]

Hello,

maybe I did something stupid and I am not able to find the reason but after upgrading to SSHGuard 1.7.0 SSH is blocked after one wrong password input.


Aug 29 21:52:27 abv sshguard[80566]: 91.10.95.96: blocking for 1200 secs (1 attacks in 0 secs, after 1 abuses over 0 secs)

sshguard_enable="YES"
sshguard_safety_threshold="8"
sshguard_danger_thresh="10"
sshguard_release_interval="600"
sshguard_reset_interval="7200"
sshguard_blacklist=30:/var/db/sshguard/blacklist.db
sshguard_watch_logs="/var/log/auth.log:/usr/jails/aaa/var/log/auth.log:/usr/jails/bbb/var/log/auth.log“

Is there anything I configured wrong ?

BR Marc