Page 1 of 1

Constant security attacks........Is this NORMAL?

Posted: Tue May 01, 2007 3:12 am
by D-Rock
thank you in advance for reading this post.

when i check my log i have a steady stream of attacks from servers in asia...

are these attacks what one gets constantly and now i have the power to see them thru Mikrotik or should i be taking a more serious approach to blocking these attacks.

should i just let the box do it´s job?

i feel like i have a whole class of computer geeks trying my box on a daily basis for the last three months.

cheers.

Posted: Tue May 01, 2007 3:22 am
by GotNet
Pretty normal. What ports or services are they "attacking"? Easy to block that stuff via firewall input chain.

Posted: Tue May 01, 2007 5:53 am
by Equis
ssh & ftp are alwasy getting hit.
I just block them to outside my network

ssh....

Posted: Tue May 01, 2007 9:04 am
by D-Rock
yeah it is on the SSH service...

always login failures with numerous random password attempts.
i will look into how to block this area ..thanks

Posted: Wed May 02, 2007 6:51 am
by omega-00
disable and redirect services to a non standard port?

I'd try something like
1021 = ftp
1022 = ssh

of course if your passwords are secure then there's no real need to do this, just an added layer of security.