bugzilla-daemon at mindrot.org
2022-Jul-06 07:16 UTC
[Bug 3457] New: Not logging login attempts until half of max lets bots try many times
https://bugzilla.mindrot.org/show_bug.cgi?id=3457
Bug ID: 3457
Summary: Not logging login attempts until half of max lets bots
try many times
Product: Portable OpenSSH
Version: 8.9p1
Hardware: amd64
OS: Linux
Status: NEW
Severity: security
Priority: P5
Component: sshd
Assignee: unassigned-bugs at mindrot.org
Reporter: ThellraAK at absurdlybored.com
cat auth.log | grep 46.101.X.Y | grep "preauth" | wc -l
554
554 failed [preauth] from just today
For 46.101.X.Y number, fail2ban didn't even notice them
:/var/log# cat fail2ban.log | grep 46.101.X.Y
Comes back with nothing.
I think this is caused by MaxAuthTries defaulting to 6, and only
logging after 3 failures, which seems to let an unlimited amount of
attempts without logging any failures.
--
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2022-Jul-06 07:35 UTC
[Bug 3457] Not logging login attempts until half of max lets bots try many times
https://bugzilla.mindrot.org/show_bug.cgi?id=3457
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |djm at mindrot.org
Status|NEW |RESOLVED
Resolution|--- |WORKSFORME
--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Set Loglevel=verbose in sshd_config and you will see all attempts.
--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2022-Oct-04 10:59 UTC
[Bug 3457] Not logging login attempts until half of max lets bots try many times
https://bugzilla.mindrot.org/show_bug.cgi?id=3457 --- Comment #2 from Damien Miller <djm at mindrot.org> --- Closing bugs from openssh-9.1 release cycle -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2023-Mar-17 02:37 UTC
[Bug 3457] Not logging login attempts until half of max lets bots try many times
https://bugzilla.mindrot.org/show_bug.cgi?id=3457
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED
--- Comment #3 from Damien Miller <djm at mindrot.org> ---
OpenSSH 9.3 has been released. Close resolved bugs
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.