Down.. but i can't find the reason

black&white

Well-Known Member
Aug 10, 2004
73
0
156
Hi,
from 2 days i have a down on one of my servers but i can't find the reason. I have checked tmp directory and i have no found anything.

In /var/log/messages i have found that:

Feb 9 01:33:10 server portsentry[4574]: attackalert: Connect from host: mimir/10.214.16.1 to TCP port: 111
Feb 9 01:33:10 server portsentry[4574]: attackalert: Host: 10.214.16.1 is already blocked. Ignoring
Feb 9 01:33:10 server portsentry[4574]: attackalert: Connect from host: mimir/10.214.16.1 to TCP port: 111
Feb 9 01:33:10 server portsentry[4574]: attackalert: Host: 10.214.16.1 is already blocked. Ignoring
Feb 9 01:36:26 server pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Feb 9 01:36:26 server pure-ftpd: ([email protected]) [INFO] Logout.
Feb 9 01:44:54 server pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Feb 9 01:44:54 server pure-ftpd: ([email protected]) [INFO] Logout.


Could they be the reason of my downs? What else i could do?

Thank you for your help
 

Bailey

Well-Known Member
Aug 12, 2001
120
1
318
Wisconsin
Does your server appear accessible now? :confused:

Are you running any other firewalls? Are they turned off?

Are your services up or down?

You may need to also flush iptables, any portsentry deny files, and restart your server.

If it still does not appear up, I highly recommend hiring a server administrator.

:D Bailey