Thread: How to block attackers automatically with /etc/hosts.deny (Different Services)

[root@cisco-ccna scripts]# cat /etc/rsyslog.d/50-default.conf | grep auth
cat: /etc/rsyslog.d/50-default.conf: No such file or directory
[root@cisco-ccna scripts]# ls /var/log/
boot.log cron dmesg.old httpd maillog mysqld.log secure tallylog wtmp
btmp dmesg fail2ban.log lastlog messages samba spooler vsftpd.log yum.log
[root@cisco-ccna scripts]#

I am doomed

Looks like i'm doomed

[root@cisco-ccna /]# cat /etc/rsyslog.d/50-default.conf | grep auth
cat: /etc/rsyslog.d/50-default.conf: No such file or directory
[root@cisco-ccna /]# ls /var/log/
boot.log cron dmesg.old httpd maillog mysqld.log secure tallylog wtmp
btmp dmesg fail2ban.log lastlog messages samba spooler vsftpd.log yum.log
[root@cisco-ccna /]#

Maybe i should be working on a Dedicated environment, and not a VM....

sorry , that's my mistake "/etc/rsyslog.d/50-default.conf" this file is available in Ubuntu base system. i have installed rsyslogd in my centos and checked the auth logs store in /var/log/secure and /var/log/messages

Hi,

you can use Fail2ban is a similar program that prevents brute force attacks against SSH / VSFTPD.
for more information link