Hello. ip blocked for port scanning servers. what were you doing with this ip &
csf.deny: IP # lfd: (PERMBLOCK) IP (RU/Russian Federation/srv-mail.tmotor.ru) has had more than 4 temp blocks in the last 86400 secs - Wed Jan 22 11:55:42 2014
server [~]# grep IP /var/log/lfd.log
Jan 22 06:59:02 tisza lfd[783254]: *Port Scan* detected from IP (RU/Russian Federation/srv-mail.tmotor.EN). 11 hits in the last 75 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT]
Jan 22 07:59:02 tisza lfd[1015817]: Incoming IP IP temporary block removed
Jan 22 08:04:58 tisza lfd[1040126]: *Port Scan* detected from IP (RU/Russian Federation/srv-mail.tmotor.EN). 11 hits in the last 120 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT]
Jan 22 09:05:01 tisza lfd[249842]: Incoming IP IP temporary block removed
Jan 22 09:31:45 tisza lfd[370178]: *Port Scan* detected from IP (RU/Russian Federation/srv-mail.tmotor.EN). 11 hits in the last 210 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT]
Jan 22 10:31:47 tisza lfd[680074]: Incoming IP IP temporary block removed
Jan 22 10:47:35 tisza lfd[765561]: *Port Scan* detected from IP (RU/Russian Federation/srv-mail.tmotor.EN). 11 hits in the last 246 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT]
Jan 22 11:47:39 tisza lfd[76682]: Incoming IP IP temporary block removed
Jan 22 11:55:42 tisza lfd[126011]: (PERMBLOCK) IP (RU/Russian Federation/srv-mail.tmotor.ru) has had more than 4 temp blocks in the last 86400 secs - *Blocked in csf* [PS_LIMIT]
|
