1 reputation
bio website megazirt.co.uk
location Norfolk, United Kingdom
age 31
visits member for 2 years, 6 months
seen Oct 5 '12 at 15:09

comment Fail2Ban does not ban failed root login attempt
I've noticed that in my /var/log/secure log I also had lots of lines like in the question reading Jan 20 10:51:04 localhost sshd[28676]: Received disconnect from 11: Bye Bye [preauth] But without any other lines mentioning the same IP, so in the /etc/fail2ban/filter.d/sshd.conf file I added a filter reading ^%(__prefix_line)sReceived disconnect from <HOST>: 11: Bye Bye\s*$