Help and save me from the bruteforce attack on server

Discussion in 'Security' started by proxified, Dec 25, 2008.

  1. #1
    Someone is continuousely bruteforcing on my dedicated server since past 10-12 hrs

    I was out of station so din't knew about it but saw hundreds of mails of login fail from the same IP address

    I already have turned on cPHulk Brute Force Protection and blocked that IP address but still the person is able to bruteforce with the same IP address

    What should i do now

    Please help me asap as already my server got hacked by bruteforcing a couple of days back and i lost many of my sites
     
    proxified, Dec 25, 2008 IP
  2. Tearabite

    Tearabite Prominent Member

    Messages:
    4,629
    Likes Received:
    429
    Best Answers:
    0
    Trophy Points:
    300
    #2
    I dont understand why cPHulk isnt working.. you should look into that.. but you could also try denying the IP with APF or IPTables .
     
    Tearabite, Dec 25, 2008 IP
  3. proxified

    proxified Well-Known Member

    Messages:
    1,308
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    120
    #3
    i have done that with APF too but i dont know what IPtables is

    i am new to server management so please help me out
     
    proxified, Dec 25, 2008 IP
  4. Tearabite

    Tearabite Prominent Member

    Messages:
    4,629
    Likes Received:
    429
    Best Answers:
    0
    Trophy Points:
    300
    #4
    you might try CSF - easy to configure firewall.
     
    Tearabite, Dec 25, 2008 IP
    proxified likes this.
  5. proxified

    proxified Well-Known Member

    Messages:
    1,308
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    120
    #5
    thanks alot mate
    i will read and follow it
    hope it helps out
     
    proxified, Dec 25, 2008 IP
  6. JustAStranger

    JustAStranger Guest

    Messages:
    141
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #6
    linux or windows is the only real question.
    Everything else depends on this.
     
    JustAStranger, Dec 26, 2008 IP
  7. proxified

    proxified Well-Known Member

    Messages:
    1,308
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    120
    #7
    its a linux server

    thanks anyways


    prob has been solved



    MODS may close this thread please
     
    proxified, Dec 26, 2008 IP
  8. Tearabite

    Tearabite Prominent Member

    Messages:
    4,629
    Likes Received:
    429
    Best Answers:
    0
    Trophy Points:
    300
    #8
    well DO tell us how you solved it!
     
    Tearabite, Dec 26, 2008 IP
  9. proxified

    proxified Well-Known Member

    Messages:
    1,308
    Likes Received:
    34
    Best Answers:
    0
    Trophy Points:
    120
    #9
    i just blocked the IP from IP deny manager and host access control for all kinds of access and since then there has been no attack
     
    proxified, Dec 26, 2008 IP
  10. SSANZ

    SSANZ Peon

    Messages:
    861
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #10
    To prevent further attacks google - configserver

    Includes scripts which automatically block attackers.
     
    SSANZ, Dec 31, 2008 IP