Runs a lightweight up to date, DenyHosts 3.0 instance on the log file you choose (usually /var/log/secure) and writes the IP addresses that have been blocked to /etc/hosts.deny.

By default it'll upload IPs you block to the DenyHosts sync server to share with other DenyHosts users, you can turn this off in the denyhosts.conf config file.

You can also download other blocked IPs by enabling SYNC_DOWNLOAD in the denyhosts.conf config file.

docker run -d \
	--name DenyHosts \
	--restart=always \
	-v /var/log/auth.log:/var/log/auth.log:ro \
	-v /etc/hosts.deny:/etc/hosts.deny \
	adriel/denyhosts

docker run -d \
	--name DenyHosts \
	--restart=always \
	-v /var/log/secure:/var/log/secure:ro \
	-v /etc/hosts.deny:/etc/hosts.deny \
	adriel/denyhosts

Overwrite denyhosts.conf with your own settings:

docker run -d \
	--name DenyHosts \
	--restart=always \
	-v /var/log/secure:/var/log/secure:ro \
	-v /etc/hosts.deny:/etc/hosts.deny \
	-v /your/location/denyhosts.conf:/etc/denyhosts.conf \
	adriel/denyhosts

There is a example docker-compose.yml file included in the repository to help you get started if you use docker-compose.