On 25-Feb-2010, at 23:33, Danilo Godec wrote:

> On 26. 02. 2010 00:32, LuKreme wrote:
>> On 25-Feb-10 14:44, Phil Schwartz wrote:
>>
>>> You get 10-20 hack attempts/minute per host?
>>>
>> Sometimes, yes.
>>
>> Mostly i only get a few dozen a day, but there have been times where
>> there were a couple hundred korean IPs that were trying to login to
>> non-existant accounts at an astonishingly rapid pace. In fact, that  
>> is
>> what inspired me to install DenyHosts in the first place.
>>
>>
>
> Check if these IP's are actually getting blocked? Maybe your DenyHosts
> never triggers...

I was assuming that lines like:

2010-02-20 04:49:05,440 - denyhosts   : INFO     new denied hosts:  
['203.229.x.x']
2010-02-20 07:55:19,209 - denyhosts   : INFO     new denied hosts:  
['201.26.x.x']
2010-02-20 11:29:25,846 - denyhosts   : INFO     new denied hosts:  
['75.82.x.x']

were triggers...

However, on actually catting the logs and not grepping them, I am  
seeing some errors

for example:

2010-02-25 21:40:11,608 - sync        : ERROR    <Fault 1:  
"exceptions.KeyError:'timestamp'">
Traceback (most recent call last):
   File "/usr/local/lib/python2.5/site-packages/DenyHosts/sync.py",  
line 117, in receive_new_hosts
     self.__prefs.get("SYNC_DOWNLOAD_RESILIENCY"))
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1147, in __call__
     return self.__send(self.__name, args)
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1437, in __request
     verbose=self.__verbose
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1201, in request
     return self._parse_response(h.getfile(), sock)
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1340, in  
_parse_response
     return u.close()
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 787, in close
     raise Fault(**self._stack[0])
Fault: <Fault 1: "exceptions.KeyError:'timestamp'">

or

2010-02-15 12:02:06,432 - sync        : ERROR    (61, 'Connection  
refused')
Traceback (most recent call last):
   File "/usr/local/lib/python2.5/site-packages/DenyHosts/sync.py",  
line 117, in receive_new_hosts
     self.__prefs.get("SYNC_DOWNLOAD_RESILIENCY"))
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1147, in __call__
     return self.__send(self.__name, args)
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1437, in __request
     verbose=self.__verbose
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1183, in request
     self.send_content(h, request_body)
   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1297, in  
send_content
     connection.endheaders()
   File "/usr/local/lib/python2.5/httplib.py", line 860, in endheaders
     self._send_output()
   File "/usr/local/lib/python2.5/httplib.py", line 732, in _send_output
     self.send(msg)
   File "/usr/local/lib/python2.5/httplib.py", line 699, in send
     self.connect()
   File "/usr/local/lib/python2.5/httplib.py", line 683, in connect
     raise socket.error, msg
error: (61, 'Connection refused')

but all the ERROR lines are tagged as 'sync' and none are frequent.

-- 
A: You're wrong
Q: I've never found that to be true
A: Because it make following messages more difficult
Q: Why is top-posting evil?


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to