Constant security attacks........Is this NORMAL?

D-Rock · Tue May 01, 2007 3:12 am

thank you in advance for reading this post.

when i check my log i have a steady stream of attacks from servers in asia...

are these attacks what one gets constantly and now i have the power to see them thru Mikrotik or should i be taking a more serious approach to blocking these attacks.

should i just let the box do it´s job?

i feel like i have a whole class of computer geeks trying my box on a daily basis for the last three months.

cheers.

GotNet · Tue May 01, 2007 3:22 am

Pretty normal. What ports or services are they "attacking"? Easy to block that stuff via firewall input chain.

Equis · Tue May 01, 2007 5:53 am

ssh & ftp are alwasy getting hit.
I just block them to outside my network

D-Rock · Tue May 01, 2007 9:04 am

yeah it is on the SSH service...

always login failures with numerous random password attempts.
i will look into how to block this area ..thanks

omega-00 · Wed May 02, 2007 6:51 am

disable and redirect services to a non standard port?

I'd try something like
1021 = ftp
1022 = ssh

of course if your passwords are secure then there's no real need to do this, just an added layer of security.

Constant security attacks........Is this NORMAL?

Constant security attacks........Is this NORMAL?

ssh....

Who is online