Search found 4 matches
- 12 Mar 2013, 12:18
- Forum: General Discussion (csf)
- Topic: Suspicious process running under user sshd
- Replies: 3
- Views: 6002
Re: Suspicious process running under user sshd
Check your latest update log and see if SSH has been updated. If it has, stop the service then restart as the old executable may still be running even though a new version has been installed.
- 12 Mar 2013, 12:14
- Forum: General Discussion (csf)
- Topic: SQL injection attack IP tables cycling
- Replies: 1
- Views: 4281
Re: SQL injection attack IP tables cycling
If it's a forum that is PHP based consider installing Suhosin for additional protection and ensure your software is up to date. Check a portion of the IP's and consider using country blocks as opposed to individual blocks, this can make a huge difference.
- 10 Mar 2013, 15:16
- Forum: General Discussion (csf)
- Topic: csf -u fail
- Replies: 2
- Views: 3760
Re: csf -u fail
Same happening to me too, this seems to be a common occurrence.
- 10 Mar 2013, 15:15
- Forum: General Discussion (csf)
- Topic: Please teach me how to read port scan messages
- Replies: 1
- Views: 4114
Re: Please teach me how to read port scan messages
SPT=64348 DPT=26 are for the ports.
SPT = Source Port, the port the incoming packet has been sent from.
DPT = Destination Port, the server port the packet is aimed at.
SPT = Source Port, the port the incoming packet has been sent from.
DPT = Destination Port, the server port the packet is aimed at.