Failed Login Attempts
-
Hey all.
Just wondering if the large number of failed logon attempts for my cloudatcost server is something I should be concerned about.
Thanks
-
Not really.
Do you have fail2ban installed?
-
Yes. It means a bot is trying to bruteforce it. You need to install fail2ban and possibly even disable the root account from using SSH.
-
@thecreativeone91 said:
...and possibly even disable the root account from using SSH.
Great idea.
@Sparkum read this: https://www.digitalocean.com/community/tutorials/initial-server-setup-with-centos-7
-
I dont to both of you nope.
This is really growing from my simple "Oh I'll just throw a DC in the cloud"
Haha, thinking I'm in over my head more and more by the post.
Thanks guys I'll look into that right now, I believe someone made a how to over the weekend.
-
It's normal, and yes you need to be concerned some. Time to lock that thing down. If you are going to expose root, use keys, lock to an IP or whatever.
-
Just finished adding Fail2Ban and will lock down root either tonight or tomorrow
Thanks for the help guys.
-
Gone this all done as well thanks for the tip.
