LinuxLinks.com
Newbies What Next ? News Forums Calendar

Search





News Sections
Home
General News (3973/0)
Reviews (628/0)
Press Releases (464/0)
Distributions (187/0)
Software (858/0)
Hardware (522/0)
Security (192/0)
Tutorials (338/0)
Off Topic (181/0)


User Functions
Username:

Password:

Don't have an account yet? Sign up as a New User


Events
There are no upcoming events




Denyhosts

Denyhosts

DenyHosts is a Python script that analyzes the sshd server log messages to determine what hosts are attempting to hack into your system. It also determines what user accounts are being targeted. It keeps track of the frequency of attempts from each host.

It is intended to prevent brute force attacks on SSH servers by monitoring invalid login attempts in the authentication log and blocking the originating IP addresses.

 Denyhosts

License
GNU GPL

Developer
Phil Schwartz

Website
denyhosts.sourceforge.net

Requirements
Python v 2.3 or greater
sshd server configured with tcp_wrappers support enabled

Support:
FAQ
Mailing List

Selected Reviews:

Features include:

  • Parses /var/log/secure to find all login attempts and filters failed and successful attempts
  • Synchronization mode allows DenyHosts daemons the ability to share data via a centralized server to proactively thwart attacks
  • Can be run from the command line, cron or as a daemon
  • Records all failed login attempts for the user and offending host
  • For each host that exceeds a threshold count, records the evil host
  • Keeps track of each non-existent user (eg. sdadasd) when a login attempt failed
  • Keeps track of each existing user (eg. root) when a login attempt failed
  • Keeps track of each offending host
  • Keeps track of suspicious logins (that is, logins that were successful for a host that had many login failures)
  • Keeps track of the file offset, so that you can reparse the same file (/var/log/secure) continuously (until it is rotated).
  • When the log file is rotated, the script will detect it and parse from the beginning
  • Appends /etc/hosts.deny and adds the newly banned hosts
  • Optionally sends an email of newly banned hosts and suspicious logins
  • Keeps a history of all user, host, user/host combo and suspicious logins encountered which includes the data and number of corresponding failed login attempts
  • Maintains failed valid and invalid user login attempts in separate files, such that it is easy to see which valid user is under attack (which would give you the opportunity to remove the account, change the password or change it's default shell to something like /sbin/nologin
  • Upon each run, the script will load the previously saved data and re-use it to append new failures
  • Resolves IP addresses to hostnames, if available
  • /etc/hosts.deny entries can be expired (purge) at a user specified time
Return to Security Home Page

Bookmark and Share


Last Updated Wednesday, April 02 2014 @ 02:33 PM EST


We have written a range of guides highlighting excellent free books for popular programming languages. Check out the following guides: C, C++, C#, Java, JavaScript, CoffeeScript, HTML, Python, Ruby, Perl, Haskell, PHP, Lisp, R, Prolog, Scala, Scheme, Forth, and SQL.


Group Tests
All Group Tests

Top Free Software
6 Office Suites
7 Document Processors
6 Lean Desktops
6 Desktop Search
9 Project Management
9 Groupware Apps
14 File Managers
10 Databases
21 Backup Tools
21 DVD Tools
21 Window Managers
21 Productivity Tools
9 Terminal Emulators
21 Financial Tools
21 Text Editors
21 Video Emulators
21 Home Emulators
42 Graphics Apps
6 CAD Apps
42 Scientific Apps
10 Web Browsers
42 Email Apps
12 Instant Messaging
10 IRC Clients
7 Twitter Clients
12 News Aggregators
11 VoIP Apps
11 Remote Display Apps
42 Best Games
42 More Games
21 More Games
21 Notable Games (1)
21 Notable Games (2)
21 Notable Games (3)
8 ASCII Games
9 Educational Games
42 Audio Apps
42 Video Apps
6 Screencasting Apps
80 Security Apps
9 System Monitoring
6 Family History Apps
11 PDF Tools
6 Music Servers
6 Collection Managers
7 Calculator Apps
8 Geometry Apps
Free Console Apps
14 Multimedia
Programming
8 Compilers
9 IDEs
9 Debuggers
7 Revision Control Apps
6 Doc Generators
'Free' Proprietary
21 Closed-Source Apps
Top Commercial Apps
42 Games
Free Web Software
21 Web CMS
14 Wiki Engines
8 Blog Apps
6 eCommerce Apps
5 Human Resource Apps
10 ERP
10 CRM
6 Data Warehouse Apps
8 Business Intelligence
6 Point-of-Sale

All Group Tests

Other Articles
Migrating from Windows
Back up your data
Distribution Guide
Distro Portal Pages
20 Free Linux Books
Running Linux Under Windows


Older Stories
Monday 02/17
  • Need a Good Bitcoin Client? (0)

  • Sunday 02/09
  • 5 Highly Promising Cross-Platform IDEs (0)
  • Play the Best Linux Puzzle Games (0)
  • Essential LaTeX Tools (0)
  • Unleashing the Best Open Source Social Networking Software (0)
  • Media Streaming with Top UPnP Servers (0)
  • Highlighting the Top Open Source Pandora Radio Clients (0)

  • Tuesday 12/24
  • Spotlighting the Top Open Source Crafting Tools (0)

  • Sunday 12/15
  • Uncovering the Best Open Source Google Analytics Alternatives (0)
  • Top Email Encryption Tools (0)


  • Vote

    What do you find MOST attractive about Open Source software?

    Amount of customization
    Security
    Freedom provided
    Speed of development
    Quality
    Multiple versions
    Cost
    Potential to contribute
    Ability to modify code
    Results
    4691 votes | 2 comments

    Built with GeekLog and phpBB
    Comments to the webmaster are welcome
    Copyright 2009 LinuxLinks.com - All rights reserved