Brute force attacks

Forum Moderators: mack

Message Too Old, No Replies

Brute force attacks

How common are they?

mike73

6:44 pm on Jul 17, 2006 (gmt 0)

I recently got my own server, and I get brute force attacks almost every day. Is this normal?

Terabytes

9:21 pm on Jul 18, 2006 (gmt 0)

I get brute force attacks almost every day

can you be a bit more specific?

What makes you think that you have brute force attacks?
What info are you basing this on?

Can't answer a question like this without some specifics....

it's like telling the mechanic, my car makes a noise...what is it?

too may unknowns in this question to even give a "close" answer...that's probably why nobody has replied to it...

Nutter

2:29 pm on Jul 19, 2006 (gmt 0)

The same thing happened to me when I went from a shared host to a VPS. I was amazed how many times somebody (or something) tried to login to my server. What I did was change the port that SSH uses to something else and haven't had anybody try since (about 6 months ago).

coopster

5:03 pm on Jul 19, 2006 (gmt 0)

Regarding the SSH attacks: this is where a firewall and VPN come in handy. Don't allow SSH traffic except via your VPN. A bit more of an investment but often well worth it.

trillianjedi

5:11 pm on Jul 19, 2006 (gmt 0)

Also set SSH to work using key exchanges only and as well as using a non-standard port, put it on a dedicated IP address with no DNS resolving it.