Quote:
Originally Posted by directfiesta
So you can rule out your ISP , software .
What is left is a firewall on your box ( or another block of another nature ) or a misconfig of your box ....
Like the firewall I run, I can set that IP's that have failed 5 times going in are added to a permanent block ....
Ir is weird.... to say the least
|
Example:
Time: Sun Dec 17 11:32:26 2006
IP: 208.116.38.153 (Unknown)
Failures: 5 (sshd)
Interval: 75 seconds
Blocked: Yes
Log entries:
Dec 17 11:32:21 serveur2 sshd[9807]: Failed password for root from 208.116.38.153 port 33456 ssh2
Dec 17 11:32:21 serveur2 sshd[9809]: Failed password for root from 208.116.38.153 port 37039 ssh2
Dec 17 11:32:21 serveur2 sshd[9811]: Failed password for root from 208.116.38.153 port 58033 ssh2
Dec 17 11:32:21 serveur2 sshd[9812]: Failed password for root from 208.116.38.153 port 60947 ssh2
Dec 17 11:32:21 serveur2 sshd[9815]: Failed password for root from 208.116.38.153 port 38928 ssh2