cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to the Smart Net Total Care Community!

Our community includes Cisco experts to answer your questions about the Smart Net Total Care (SNTC) portal and CSP-Collector.
Click the navigation links below to access materials for using our service and supported collectors.

922
Views
0
Helpful
5
Replies
Highlighted
Beginner

IP address blocked due to malicious activity

Hi Team,

 

I need assistance as I am having issue accessing the CSPC (v2.7) portal via GUI. 

The error I am getting is as following:

 

Your IP Address has been temporarily blocked as we are detecting malicious activity. Please try later.

 

Please also note that my root account is locked out at the moment and I am unable to login via CLI to the root account. 

Everyone's tags (1)
5 REPLIES 5
Highlighted
Cisco Employee

Re: IP address blocked due to malicious activity

Hello Kanes,
The message is displayed when too many incorrect password and/or Captcha inputs have been used to attempt to login to the CSPC GUI. You may need to try using the "Password Reset" questions to try and create a new password for the GUI. From the "admin" CLI username, you can issue the command "pwdreset root 90" to generate a new password for the root username as well.
Thank you,
Jarrett
Highlighted
Beginner

Re: IP address blocked due to malicious activity


@Jarrett Pomeroy wrote:
Hello Kanes,
The message is displayed when too many incorrect password and/or Captcha inputs have been used to attempt to login to the CSPC GUI. You may need to try using the "Password Reset" questions to try and create a new password for the GUI. From the "admin" CLI username, you can issue the command "pwdreset root 90" to generate a new password for the root username as well.
Thank you,
Jarrett

Hi Mate,

 

Good Day. 

 

It still does not allow me to login. 

 

Regards,

 

Kanes.R

Highlighted
Cisco Employee

Re: IP address blocked due to malicious activity

To clarify, are you unable to access the CLI or the WebUI of the CSPC? If CLI, please find my instructions further down in this thread.
Highlighted
Enthusiast

Re: IP address blocked due to malicious activity

Aloha All

I too have this issue along with an error @ the CLI says 

Using keyboard-interactive authentication.
Account locked due to 247 failed logins
Password:
Access denied
Using keyboard-interactive authentication.
Account locked due to 248 failed logins

 

Any way to reset this ?

Highlighted
Cisco Employee

Re: IP address blocked due to malicious activity

If you have CLI access to 'collectorlogin' and 'root' accounts I would suggest resetting the admin CLI password, allocating 30 minutes, then attempting to log in again.

If that still fails due to the account lock you may also attempt the following command (as root):

#pam_tally2 -u admin -r
CreatePlease to create content
Right-rail
Navigation
Be sure to bookmark these support pages and use them in the future to find all the self-help information.
Helpful Links