For ssh brute force attacks, google "sshdfilter" Works wonders but remember to add yourself to the whitelist.
I use to see 1000s of attempts from Chinese IPs, now after 3 (immediate for "root"), they get iptables banished (DROPped) to the abyss. On Feb 14, 2010, at 1:14 PM, f7 f0rkz <[email protected]> wrote: > I think it -may- be someone trying to brute force ssh. I changed > the port, > lets see if that keeps it at bay. > > I'm going to continue to monitor it tho. > > -f0rkz > > On Sun, Feb 14, 2010 at 4:06 PM, Schlup > <[email protected]> wrote: > >> Yes, I'm having the issue as well. I run 6 bots on the server full >> time >> though and I kinda figured that was the issue but it may not be. The >> server >> restart is very random though and only happens when users on the on >> the >> server playing. >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of f7 >> f0rkz >> Sent: Sunday, February 14, 2010 2:45 PM >> To: Half-Life dedicated Linux server mailing list >> Subject: [hlds_linux] Team Fortress 2 | Random server crashes >> >> For the past week or so one of our 32 player servers has randomly >> dropped >> all connections. During the outage, the server console locks up. >> We run >> the server in screen, but I do not believe this to be the issue. >> >> Is anyone else having trouble with their server randomly locking up? >> >> What is even weirder is the server restarts itself. Its like it just >> magically resumes operation. >> >> One thing I thought it could be is DNS resolvers because this has >> happened >> in the past where the host was reloading bind to add zones and the >> server >> locks up. I checked my resolv.conf and I am using google's opendns >> resolvers as well as bind on the local box. In case bind is the >> issue on >> the local box I removed it from resolv.conf. >> >> Just want to know if anyone else is having this issue. >> >> -f0rkz >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list >> archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list >> archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list > archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
