We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Chinese Issue


Razakel
20-01-2015, 18:16
There's not a huge amount you can do about this, really, it's just something you have to put up with - I'm averaging 500 attempts a day. If a machine's internet-accessible, people will try and break in to it.

There's a few things to mitigate it though: you could put your SSH server on a weird port or firewall it to only allow connections from your ISP's IP range.

fail2ban is also an option for automatically blocking IPs.

You can also report it to the abuse contact associated with the IP, but generally China is more concerned with stopping people finding out about Tienanmen Square than stopping them from hacking foreign servers.

Neil
20-01-2015, 10:41
Hi

If it is the same IP then you can use the OVH Network Firewall to block it or use a software firewall to block it.

bigchap
20-01-2015, 10:15
I have had my box now for a few months, and it seems periodically it gets hit from a brute force attempt on Root from the same ip, which is tracked back to China.

Anyone else having issues like this or can suggest something to stop this?

i have removed all the rights that Root had so if they got in they wouldn't get much, but its annoying more than anything.

Cheers