Search found 2 matches
- 13 Jun 2016, 07:48
- Forum: General Discussion (csf)
- Topic: Suspicious process running under user sshd
- Replies: 3
- Views: 3395
Re: Suspicious process running under user sshd
Add the sshd user in csf.pignore list is also not a good option as it will ignore all ssh login alerts.
- 09 Jun 2016, 05:45
- Forum: General Discussion (csf)
- Topic: Suspicious process running under user sshd
- Replies: 3
- Views: 3395
Suspicious process running under user sshd
Hi, I have received too many lfd alert mails.I have added the ip(116.31.116.47) in csf.deny but still receiving the alert mails regarding this IP. The mail states as :-- Time: Wed Jun 8 11:01:04 2016 +0100 PID: 26038 (Parent PID:26037) Account: sshd Uptime: 95 seconds Executable: /usr/local/sbin/ssh...