Search found 4 matches

by squipper
12 Mar 2013, 12:18
Forum: General Discussion (csf)
Topic: Suspicious process running under user sshd
Replies: 3
Views: 5200

Re: Suspicious process running under user sshd

Check your latest update log and see if SSH has been updated. If it has, stop the service then restart as the old executable may still be running even though a new version has been installed.
by squipper
12 Mar 2013, 12:14
Forum: General Discussion (csf)
Topic: SQL injection attack IP tables cycling
Replies: 1
Views: 3685

Re: SQL injection attack IP tables cycling

If it's a forum that is PHP based consider installing Suhosin for additional protection and ensure your software is up to date. Check a portion of the IP's and consider using country blocks as opposed to individual blocks, this can make a huge difference.
by squipper
10 Mar 2013, 15:16
Forum: General Discussion (csf)
Topic: csf -u fail
Replies: 2
Views: 3404

Re: csf -u fail

Same happening to me too, this seems to be a common occurrence.
by squipper
10 Mar 2013, 15:15
Forum: General Discussion (csf)
Topic: Please teach me how to read port scan messages
Replies: 1
Views: 3560

Re: Please teach me how to read port scan messages

SPT=64348 DPT=26 are for the ports.

SPT = Source Port, the port the incoming packet has been sent from.
DPT = Destination Port, the server port the packet is aimed at.