[adrenalinic]

Hi Thanks.
I have found in /var/log/syslog .

But the attack arrive from more than 10 source ip address, why ossec non listen it and the ipaddress to the denyhost file?

Thanks you.
Best regards.