Search found 2 matches
- 08 Mar 2013, 19:14
- Forum: General Discussion (csf)
- Topic: root login failures continue for hours despite detection
- Replies: 1
- Views: 5535
Re: root login failures continue for hours despite detection
As a sanity test, I rechecked that root logins normally are blocked on this system. From another host, I attempted repeated ssh logins to root with incorrect passwords. It only took about 12 logins before my IP was blocked. In this case, csf and lfd are definitely functioning as intended. I also ver...
- 08 Mar 2013, 02:46
- Forum: General Discussion (csf)
- Topic: root login failures continue for hours despite detection
- Replies: 1
- Views: 5535
root login failures continue for hours despite detection
I think that csf/lfd should have stopped this brute force attempt at root access ... but it did not. Today at 10:04:19, perpetrator at 59.108.92.24 started attempting ssh root logins. Log lines from /var/log/secure read: Mar 7 10:04:19 osprey sshd[11556]: pam_unix(sshd:auth): authentication failure;...