ssh_exchange_identification: Connection closed by remote host

  • Follow


some time when i login to my server using ssh it show me error like

ssh jakarta
ssh_exchange_identification: Connection closed by remote host

thank you so much.
0
Reply 24.ashish (9) 10/21/2009 7:20:54 PM

> some time when i login to my server using ssh it show me error like
>
> ssh jakarta
> ssh_exchange_identification: Connection closed by remote host
>
> thank you so much.

I've seen this when TCP wrappers are enabled for SSHD, and the host
you're connecting from is not found in /etc/hosts.allow
0
Reply ITguy 10/21/2009 9:48:31 PM


On Oct 21, 2:20=A0pm, "er.verma" <24.ash...@gmail.com> wrote:
> some time when i login to my server using ssh it show me error like
>
> ssh jakartassh_exchange_identification: Connection closed by remote host

This is an oldish thread but we got the same problem recently.
The problem was caused by script-kiddies running botnets, scanning the
ssh servers with a dictionary attack.
The ssh servers refuse connections after MaxStartups from the botnet
is reached.

From "man sshd_config"

MaxStartups

         Specifies the maximum number of  concurrent  unauthenti-
         cated   connections   to  the  sshd  daemon.  Additional
         connections are dropped until authentication succeeds or
         the LoginGraceTime expires for a connection. The default
         is 10.

The solution was to increase the MaxStartups in /etc/sshd_config and
block the botnets with something like "DenyHosts"
http://denyhosts.sourceforge.net/
0
Reply ISO 11/12/2009 9:49:44 PM

2 Replies
846 Views

(page loaded in 0.063 seconds)

Similiar Articles:













7/22/2012 9:54:35 PM


Reply: