Unknown users trying to log in? Where is it logged?

[NoOp]

On 12/06/2008 09:06 AM, Sundar Nagarajan wrote:
> Chris Mohler wrote:
>> On Thu, Dec 4, 2008 at 12:53 PM, Dotan Cohen <dotancohen at gmail.com> wrote:
>> If I have a SSH server exposed to the net, I usually tell sshd to
>> listen on a different port (higher than 1024) - that will get rid of
>> 99% of people "banging on the door".  Of course there are other things
>> you can do to harden sshd, but I've found that moving the port is a
>> good start.
> 
> I use fail2ban (http://www.fail2ban.org/wiki/index.php/Main_Page). It's 
> also available in the Ubuntu repositories.
> 
> 

And denyhost. Both work well.

http://www.ubuntugeek.com/securing-ssh.html
  http://manpages.ubuntu.com/manpages/hardy/man8/denyhosts.html