ConfigServer Community Forum

As a sanity test, I rechecked that root logins normally are blocked on this system. From another host, I attempted repeated ssh logins to root with incorrect passwords. It only took about 12 logins before my IP was blocked. In this case, csf and lfd are definitely functioning as intended. I also ver...

I think that csf/lfd should have stopped this brute force attempt at root access ... but it did not. Today at 10:04:19, perpetrator at 59.108.92.24 started attempting ssh root logins. Log lines from /var/log/secure read: Mar 7 10:04:19 osprey sshd[11556]: pam_unix(sshd:auth): authentication failure;...