This page is no longer maintained. You can find most of the attacks SSHGuard recognizes in the parser test cases.
Test cases are 3 lines. For example:
Invalid user inexu from 220.127.116.11 100 18.104.22.168 4 10 M
This indicates that the first line (the log message) matches and gives
sshg-parser output given by the second line.
Lates Releases View all»
F.A.Q. View all»
- Sshguard does not workYou have one of these problems: sshguard is not given logs correctly sshguard cannot run the commands for ...
- What does sshguard do?The short version is: it receives log messages, it detects when a networked service has been abused based ...
- How do I enable monitoring for service X?You don't. Sshguard enables monitoring for all supported services straight out of the box. If you think ...