Curtis Schongalla A+, Network+, Security+, MCSA, & CCNP

Setup DenyHosts

Since setting up the web server I have notice d a lot of activity in /var/log/secure. I was really surprised to see a vast number of attempted logins to ssh on my server. To prevent this I found a nice open source program called DenyHosts which will monitor /var/log/secure and block any IP address which attempt brute-force attacks on ssh by adding the ip address to the hosts.deny file. It appears to be working very well.