Had one Fedora 32 machine that has the ssh port open. the /var/btmp file was showing a number of lines with the ssh:nottyroot line followed by various different IP addresses.
Can stop the sshd service that the btmp file stops growing.
Use to use denyhosts on systems, but it seems to have been removed. The old denyhost would add blocked ipaddresses to stop these sites? Know that root is not allowed to login ssh by default, so are these lines just saying attempts had been blocked.
Have vsftpd setup to use passive ports, so blocking port 22 would not be a big deal. But just seeing the btmp file grow seems to show wasted bandwidth if not showing an issue.
Is it an issue or not??
Thanks.
+------------------------------------------------------------+ Michael D. Setzer II - Computer Science Instructor (Retired) mailto:mikes@guam.net mailto:msetzerii@gmail.com Guam - Where America's Day Begins G4L Disk Imaging Project maintainer http://sourceforge.net/projects/g4l/ +------------------------------------------------------------+