Search found 2 matches

by somesh
13 Jun 2016, 07:48
Forum: General Discussion (csf)
Topic: Suspicious process running under user sshd
Replies: 3
Views: 2265

Re: Suspicious process running under user sshd

Add the sshd user in csf.pignore list is also not a good option as it will ignore all ssh login alerts.
by somesh
09 Jun 2016, 05:45
Forum: General Discussion (csf)
Topic: Suspicious process running under user sshd
Replies: 3
Views: 2265

Suspicious process running under user sshd

Hi, I have received too many lfd alert mails.I have added the ip(116.31.116.47) in csf.deny but still receiving the alert mails regarding this IP. The mail states as :-- Time: Wed Jun 8 11:01:04 2016 +0100 PID: 26038 (Parent PID:26037) Account: sshd Uptime: 95 seconds Executable: /usr/local/sbin/ssh...