Attempt at Brute Force?

Spencer

@Victor said: During the period when we were with them, we had quite a few network issues, and that's ultimately one of the main reason we left them. But I gotta admit, their support staff are superb, answered my calls and tickets even when it's during the middle of the night. Had to call in when one of our servers went offline without reason, and turns out it's powered off.. :S

Haha yea their staff is great. I asked about BW upgrades and they gave me a free 5TB upgrade.

Corey

@ErawanArifNugroho Anything they want.... if you are part of a botnet they control your node.... they can launch DDOS with it, use it to compromise more servers... anything malicious they want.

klikli

If you do monitor your HTTP error logs as well, you will definitely notice that there's plenty of attempts of different sorts of exploits.

MrAndroid

@Francisco said: razor1911

who?

Wintereise

who?

One of the largest and most popular PC game cracking scene members.

ShardHostSarah

@Victor said: During the period when we were with them, we had quite a few network issues

They have performed a large number of network upgrades and the network is pretty solid. Upgrade all TOR switches and core/edge equipment.

jenok

@sDsB said: So far this week 13213 failed login attempts.

...from 17 different IPs.

wow !! don't you change your ssh port ?

zhuanyi

Is there a good fail2ban tutorials around? Installed it on my vps but don't know how to configure it

MrAndroid

http://library.linode.com/security/fail2ban

Victor

@zhuanyi said: Is there a good fail2ban tutorials around? Installed it on my vps but don't know how to configure it

Search for it on howtoforge.com, I remember reading a few on there.

zhuanyi

Thanks, does fail2ban enables all the firewall blocks by default? I changed my ssh port and fail2ban just refuse me to log in, and I had no idea how I can reinitialize it...

Randy

i got them almost everyday. no joke (china.Japan.US ETCZ)

zhuanyi

@Daniel @Victor thanks

eastonch

I use fail2ban on every LEB / VPS / NODE I get, and ever had, nothing says "I'm lazy" like an application that automatically blocks things, and reports the blocks to you.

Taz

Chinese people like to log into my Mail server a bit too much. 1200 block in last 2 days on failed mail server login. Ha ha.

Randy

nh. yeah the are the pros;-)

HalfEatenPie

Wait so I've been trying to find a tutorial to install fail2ban for cPanel but it seems to be pretty fritzy. Anyone can help? (http://forums.cpanel.net/f34/cpanel-server-bruteforce-firewall-197651.html That one's out of date)

MrDOS

The biggest problem with fail2ban, IMHO, is the ~20MB RAM it constantly consumes. Makes it rather less suited for LEBs.

JTR

My VPS doesn't have fail2ban setup, so I'm unsure. My dedi sends me 2-5 fail2ban emails per day, sometimes as many as 10 or more. Looking through the logs, I found 15k access attempts in the last week, which is surprising and most likely inaccurate.

Spencer

@HalfEatenPie said: Wait so I've been trying to find a tutorial to install fail2ban for cPanel but it seems to be pretty fritzy. Anyone can help? (http://forums.cpanel.net/f34/cpanel-server-bruteforce-firewall-197651.html That one's out of date)

Just install CSF. Much better. And is integrated in WHM.