After DA Update - Brute-Force Attack from localhost on User root

johannes

Verified User
Joined
Feb 18, 2007
Messages
824
Hello guys,

strang thing after DA autoupdate: at 4:22 Directadmin autoupdated itself, 1 Minute at 4:23 later I got this systemmessage:

Brute-Force Attack detected in service log from IP(s) localhost on User(s) root
IP localhost has 2263 failed login attempts: mysql1=2263
User root has 21 failed login attempts: mysql1=21

And again 1hour later at 5:26, the same once more:

IP localhost has 2263 failed login attempts: mysql1=2263
User root has 21 failed login attempts: mysql1=21

Since then it didnt repeated. What can this be?

Thank you
 
Back
Top