View Single Post
  #5  
Old 21st May 2013, 14:59
JESUSSAVES JESUSSAVES is offline
Member
 
Join Date: Sep 2011
Location: U.S.
Posts: 86
Thanks: 16
Thanked 8 Times in 7 Posts
Default local test results

Till, thank you again for your response and help.

Yes, you are right the mail was delivered to the same account that sent it in less than 1 minute.

I'm quite sure that my system has been hacked and I'm wondering if fail2ban is working properly. I remember, it may have been when I was running Fedora not sure, but I used to get messages to root mail all day long about IP addresses being banned. I don't get them anymore. I'm wondering if fail2ban is working properly? I've copied the log from Monitor and pasted it below.

Code:
Data from: 2013-05-21 11:45
2013-05-19 06:25:06,756 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.4-SVN
2013-05-19 06:25:06,941 fail2ban.filter : INFO Log rotation detected for /var/log/syslog
2013-05-19 06:25:07,780 fail2ban.filter : INFO Log rotation detected for /var/log/mail.log
2013-05-19 06:25:07,942 fail2ban.filter : INFO Log rotation detected for /var/log/syslog
2013-05-19 06:25:08,075 fail2ban.filter : INFO Log rotation detected for /var/log/auth.log
2013-05-19 06:26:02,126 fail2ban.filter : INFO Log rotation detected for /var/log/auth.log
2013-05-19 06:26:05,837 fail2ban.filter : INFO Log rotation detected for /var/log/mail.log
2013-05-19 06:51:52,500 fail2ban.actions: WARNING [ssh] Ban 61.156.238.56
2013-05-19 07:01:53,164 fail2ban.actions: WARNING [ssh] Unban 61.156.238.56
2013-05-19 19:35:48,397 fail2ban.actions: WARNING [ssh] Ban 114.80.202.30
2013-05-19 19:45:49,062 fail2ban.actions: WARNING [ssh] Unban 114.80.202.30
2013-05-19 21:53:11,384 fail2ban.actions: WARNING [ssh] Ban 210.6.26.45
2013-05-19 22:03:12,050 fail2ban.actions: WARNING [ssh] Unban 210.6.26.45
2013-05-20 06:25:06,061 fail2ban.filter : INFO Log rotation detected for /var/log/syslog
2013-05-20 08:46:45,089 fail2ban.actions: WARNING [ssh] Ban 31.3.245.178
2013-05-20 08:56:45,751 fail2ban.actions: WARNING [ssh] Unban 31.3.245.178
2013-05-20 10:52:42,341 fail2ban.actions: WARNING [ssh] Ban 61.35.191.245
2013-05-20 11:02:43,002 fail2ban.actions: WARNING [ssh] Unban 61.35.191.245
2013-05-20 17:04:08,649 fail2ban.actions: WARNING [ssh] Ban 61.35.191.245
2013-05-20 17:14:09,314 fail2ban.actions: WARNING [ssh] Unban 61.35.191.245
2013-05-21 01:58:28,699 fail2ban.actions: WARNING [ssh] Ban 103.3.79.83
2013-05-21 02:08:29,362 fail2ban.actions: WARNING [ssh] Unban 103.3.79.83
2013-05-21 06:25:05,813 fail2ban.filter : INFO Log rotation detected for /var/log/syslog
Reply With Quote