Failed Login Attempts

Sparkum

Hey all.

Just wondering if the large number of failed logon attempts for my cloudatcost server is something I should be concerned about.

Thanks

Not really.

Do you have fail2ban installed?

Yes. It means a bot is trying to bruteforce it. You need to install fail2ban and possibly even disable the root account from using SSH.

@thecreativeone91 said:

...and possibly even disable the root account from using SSH.

Great idea.

@Sparkum read this: https://www.digitalocean.com/community/tutorials/initial-server-setup-with-centos-7

Sparkum

I dont to both of you nope.

This is really growing from my simple "Oh I'll just throw a DC in the cloud"

Haha, thinking I'm in over my head more and more by the post.

Thanks guys I'll look into that right now, I believe someone made a how to over the weekend.

scottalanmiller

It's normal, and yes you need to be concerned some. Time to lock that thing down. If you are going to expose root, use keys, lock to an IP or whatever.

Sparkum

@scottalanmiller

Just finished adding Fail2Ban and will lock down root either tonight or tomorrow

Thanks for the help guys.

Sparkum

@Aaron-Studer

Gone this all done as well thanks for the tip.