brute force attack

Anton

Verified User
Joined
Oct 6, 2010
Messages
102
Location
Iceland
IP 175.143.53.113 has 122 failed login attempts: exim3=122

is it enough to add this ip to block in configserver firewall or is there something else i need to do to prevent this from happening ?
 
If it is blocked at your firewall they will never be able to get any further.
 
Thank you all for the tip's i have install a few and everything should be good now but i am wondering about chkrootkit the download url is down do you guys know of

anyother url for it for me to download from i would like to have it run with rkhunter.
 
Do this:

If you use centos 6:
Code:
rpm -ivh http://mirror.us.leaseweb.net/epel/6/i386/epel-release-6-7.noarch.rpm

If you use centos 5:
Code:
rpm -ivh http://epel.mirror.freedomvoice.com/5/i386/epel-release-5-4.noarch.rpm

Then do:

Code:
yum -y install chkrootkit

You can read more about EPEL here:

http://fedoraproject.org/wiki/EPEL
 
Back
Top