Community discussions

MUM Europe 2020
 
D-Rock
just joined
Topic Author
Posts: 2
Joined: Fri Jun 05, 2009 1:44 am

Constant security attacks........Is this NORMAL?

Tue May 01, 2007 3:12 am

thank you in advance for reading this post.

when i check my log i have a steady stream of attacks from servers in asia...

are these attacks what one gets constantly and now i have the power to see them thru Mikrotik or should i be taking a more serious approach to blocking these attacks.

should i just let the box do it´s job?

i feel like i have a whole class of computer geeks trying my box on a daily basis for the last three months.

cheers.
 
GotNet
Member
Member
Posts: 436
Joined: Fri May 28, 2004 7:52 pm
Location: Florida

Tue May 01, 2007 3:22 am

Pretty normal. What ports or services are they "attacking"? Easy to block that stuff via firewall input chain.
 
User avatar
Equis
Forum Veteran
Forum Veteran
Posts: 888
Joined: Mon Jun 06, 2005 6:48 am

Tue May 01, 2007 5:53 am

ssh & ftp are alwasy getting hit.
I just block them to outside my network
 
D-Rock
just joined
Topic Author
Posts: 2
Joined: Fri Jun 05, 2009 1:44 am

ssh....

Tue May 01, 2007 9:04 am

yeah it is on the SSH service...

always login failures with numerous random password attempts.
i will look into how to block this area ..thanks
 
User avatar
omega-00
Forum Guru
Forum Guru
Posts: 1167
Joined: Sat Jun 06, 2009 4:54 am
Location: Australia
Contact:

Wed May 02, 2007 6:51 am

disable and redirect services to a non standard port?

I'd try something like
1021 = ftp
1022 = ssh

of course if your passwords are secure then there's no real need to do this, just an added layer of security.

Who is online

Users browsing this forum: Google [Bot], Ilya, kos, MSN [Bot] and 61 guests