Hi Support Team,
The Anti-hammering cannot block the following login attempts:
02] Sat, 12 Mar 2022 21:01:47 (0004178) Connected from 138.68.105.51 (local address *.*.*.*, port *)
[02] Sat, 12 Mar 2022 21:01:47 (0004178) Failed to exchange the keys.
[02] Sat, 12 Mar 2022 21:01:47 (0004178) Closed session, disconnected from 138.68.105.51
[02] Sat, 12 Mar 2022 21:19:33 (0004184) Connected from 207.154.209.211 ((local address *.*.*.*, port *)
[02] Sat, 12 Mar 2022 21:19:33 (0004184) Failed to exchange the keys.
[02] Sat, 12 Mar 2022 21:19:33 (0004184) Closed session, disconnected from 207.154.209.211
[02] Sun, 13 Mar 2022 05:07:32 (0004192) Connected from 79.143.183.190 (local address *.*.*.*, port *)
[02] Sun, 13 Mar 2022 05:07:32 (0004192) Failed to exchange the keys.
[02] Sun, 13 Mar 2022 05:07:32 (0004192) Closed session, disconnected from 79.143.183.190
[02] Sun, 13 Mar 2022 05:14:34 (0004198) Connected from 207.154.209.211 (local address *.*.*.*, port *)
[02] Sun, 13 Mar 2022 05:14:34 (0004198) Failed to exchange the keys.
[02] Sun, 13 Mar 2022 05:14:34 (0004198) Closed session, disconnected from 207.154.209.211
[02] Sun, 13 Mar 2022 07:51:37 (0004200) Connected from 159.223.21.130 (local address *.*.*.*, port *)
[02] Sun, 13 Mar 2022 07:51:38 (0004200) Failed to exchange the keys.
[02] Sun, 13 Mar 2022 07:51:38 (0004200) Closed session, disconnected from 159.223.21.130
[02] Sun, 13 Mar 2022 12:19:53 (0004203) Connected from 159.223.21.130 (local address *.*.*.*, port *)
[02] Sun, 13 Mar 2022 12:19:53 (0004203) Failed to exchange the keys.
[02] Sun, 13 Mar 2022 12:19:53 (0004203) Closed session, disconnected from 159.223.21.130
[02] Sun, 13 Mar 2022 17:37:01 (0004211) Connected from 139.59.209.77 (local address *.*.*.*, port *)
[02] Sun, 13 Mar 2022 17:37:01 (0004211) Failed to exchange the keys.
Do you have any advice on what to do against these attempts?
Thx for help
V 6.6.5
Anti-Hammering
-
- Site Admin
- Posts: 2107
- Joined: Tue Sep 29, 2009 6:09 am
Re: Anti-Hammering
OK, anti-hammering is for banning the client after a few failed login tries, but from your server logs, it seems the client tried to connect only, no login try.