DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks).
This packaged was developed by the University of Michigan College of LSA IT department.
Requirements
PPC / Intel, Mac OS X 10.4 or later, Python.
The download link is wrong. Go to the developer's web site link to download. This is source code not a binary, so you must compile and install. You can also install this using MacPorts:
Excellent stuff. I've been using it for years. If you're running a public SSH server, you MUST install this. It's for advanced users -- a Python script, not a GUI application -- but it well repays the effort to learn how to set it up.
What it does is to watch a log file for unsuccessful attempts to connect to your SSH server. If there are too many attempts from a particular IP address, DenyHosts blocks all further SSH connections from that address. Optionally, it also connects to a central server and downloads the IP addresses of hosts that have attacked other users. Those hosts are then blocked too, usually before they ever attack you. Your attackers' addresses are also uploaded to the server. This creates a group-immunity effect.
It can also notify you by email when a host is blocked.
Please login or create a new MacUpdate Member account to use this feature
Watch Lists are available to MacUpdate Desktop Members Upgrade Now
Download and auto-install
using MacUpdate Desktop. Save
time moving folders and cleaning-up.
DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks).
+544
sudo port install denyhosts
+15
+1
+127
Borlox reviewed on 10 Jul 2008
What it does is to watch a log file for unsuccessful attempts to connect to your SSH server. If there are too many attempts from a particular IP address, DenyHosts blocks all further SSH connections from that address. Optionally, it also connects to a central server and downloads the IP addresses of hosts that have attacked other users. Those hosts are then blocked too, usually before they ever attack you. Your attackers' addresses are also uploaded to the server. This creates a group-immunity effect.
It can also notify you by email when a host is blocked.
+153
The download link no longer works.
Does anyone know of another place where we can obtain this?
Thank you