Search found 4 matches

by squipper
12 Mar 2013, 12:18
Forum: General Discussion (csf)
Topic: Suspicious process running under user sshd
Replies: 3
Views: 6002

Re: Suspicious process running under user sshd

Check your latest update log and see if SSH has been updated. If it has, stop the service then restart as the old executable may still be running even though a new version has been installed.
by squipper
12 Mar 2013, 12:14
Forum: General Discussion (csf)
Topic: SQL injection attack IP tables cycling
Replies: 1
Views: 4281

Re: SQL injection attack IP tables cycling

If it's a forum that is PHP based consider installing Suhosin for additional protection and ensure your software is up to date. Check a portion of the IP's and consider using country blocks as opposed to individual blocks, this can make a huge difference.
by squipper
10 Mar 2013, 15:16
Forum: General Discussion (csf)
Topic: csf -u fail
Replies: 2
Views: 3760

Re: csf -u fail

Same happening to me too, this seems to be a common occurrence.
by squipper
10 Mar 2013, 15:15
Forum: General Discussion (csf)
Topic: Please teach me how to read port scan messages
Replies: 1
Views: 4114

Re: Please teach me how to read port scan messages

SPT=64348 DPT=26 are for the ports.

SPT = Source Port, the port the incoming packet has been sent from.
DPT = Destination Port, the server port the packet is aimed at.