AndyII
Verified User
- Joined
- Oct 3, 2006
- Messages
- 571
1st time I ever have seen this in the logs, the site seems legit, like I invoked something for the first time.
Anyone know if it is a concern?
I did add a rule to the iptables and I am guessing this was the source
Anyone know if it is a concern?
kernel: ipt_recent v0.3.1: Stephen Frost <[email protected]>. http://snowman.net/projects/ipt_recent/
I did add a rule to the iptables and I am guessing this was the source
$IPTABLES -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH
$IPTABLES -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 8 --rttl --name SSH -j DROP
Last edited: