LFD keeps picking up users from a different country..

[Dan]

Well LFD keeps picking failed login attempts through SSH from the USA.

Here is a log..

Time: Thu Aug 7 02:00:01 2008 +0100
IP: 71.227.124.210 (US/United States/c-71-227-124-210.hsd1.mi.comcast.net)
Failures: 5 (sshd)
Interval: 295 seconds
Blocked: Yes

Log entries:

Aug 7 01:59:43 server sshd[25782]: Failed password for root from ::ffff:71.227.124.210 port 49004 ssh2
Aug 7 01:59:45 server sshd[25836]: Failed password for root from ::ffff:71.227.124.210 port 35195 ssh2
Aug 7 01:59:50 server sshd[25900]: Failed password for root from ::ffff:71.227.124.210 port 41485 ssh2
Aug 7 01:59:53 server sshd[25976]: Failed password for root from ::ffff:71.227.124.210 port 45754 ssh2
Aug 7 01:59:57 server sshd[26024]: Failed password for root from ::ffff:71.227.124.210 port 48509 ssh2

I have changed SSHD port to something different, Is it possible to change WHM port as well to increase my security as Livesupport said it was not possible.

Cheers,
Dan

[Administrator]

Hi Dan,

Changing SSH port and disabling direct root login for SSH is more than sufficient. There's no need to change WHM port as cpanel updates will revert WHM port settings once a new update is installed.

[Dan]

Ah okay, cheers bud