Large Number of Failed Login Attempts from IP 123.68.168.117

Discussion in 'Site & Server Administration' started by Matt18, Jun 13, 2011.

0
  1. #1
    Hi

    I am getting this e-mail in last days...

    Large Number of Failed Login Attempts from IP 123.68.168.117

    does this mean someone is trying to hack into my server? How can I prevent that? (they are different IPs)

    Thank you for your help!
     
    Matt18, Jun 13, 2011 IP
  2. stardust.x7

    stardust.x7 Active Member

    Messages:
    369
    Likes Received:
    3
    Best Answers:
    1
    Trophy Points:
    90
    #2
    Yes thats correct. Such China Users trying lot to login to other servers.

    Make your default SSH port to other port and dont let anyone know about that port number.

    Also use CSF so these spammers will get auto blocked.
     
    stardust.x7, Jun 13, 2011 IP
  3. FirstHYIPList

    FirstHYIPList Peon

    Messages:
    33
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    If it is website, just use CAPCHA. The problem will be solved.
     
    FirstHYIPList, Jun 13, 2011 IP
  4. anands

    anands Well-Known Member

    Messages:
    436
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    120
    #4
    If its SSH root login or ftp login attempts, you can protect yourself by changing the SSH port and installing CSF + LFD.
     
    anands, Jun 13, 2011 IP
  5. Matt18

    Matt18 Guest

    Messages:
    591
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    What is CSF and LFD? if it's ssh or ftp or something else?

    thanks!
     
    Matt18, Jun 13, 2011 IP
  6. lightarena

    lightarena Banned

    Messages:
    119
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #6
    CSF is a firewall. Full name ConfigServerFirewall. Did not you check their homepage?
     
    lightarena, Jun 13, 2011 IP
  7. Bohra

    Bohra Prominent Member

    Messages:
    12,573
    Likes Received:
    537
    Best Answers:
    0
    Trophy Points:
    310
    #7
    check if that IP is associated with anyone you know if not just block it
     
    Bohra, Jun 13, 2011 IP
  8. Matt18

    Matt18 Guest

    Messages:
    591
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    I guess I have some sort of firewall installed on my server... There are many IP's. I'll just ignore it. I mean bruteforce is enabled and I doubt someone can guess my password...
     
    Matt18, Jun 14, 2011 IP
  9. yester123

    yester123 Peon

    Messages:
    360
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #9
    I suggest you to block all the ips from which you are getting spams.........
     
    yester123, Jun 15, 2011 IP
  10. chandan123

    chandan123 Prominent Member

    Messages:
    11,586
    Likes Received:
    578
    Best Answers:
    0
    Trophy Points:
    360
    #10
    some kind of autoblock u can impose if certain no. of failed attempts noticed ?
     
    chandan123, Jun 15, 2011 IP
  11. Mia

    Mia R.I.P. STEVE JOBS

    Messages:
    23,694
    Likes Received:
    1,167
    Best Answers:
    0
    Trophy Points:
    440
    #11
    I don't recall the OP saying anything about spam.
     
    Mia, Jun 15, 2011 IP