Getting Tested…
Hmmm….the past several days I’ve noticed a bot-net “visiting” my server. It started off with lots of SSH login attempts, and now they’ve been attempting to log into my mailserver! The logs are quite crazy. Lots and lots of different usernames attempt to log in, all in alphabetical order, and all from different IP addresses. I assume I must be on a list…
I’ve spent some time removing people’s logins who don’t use my server anymore, and I made sure everybody who does log in gets a new password.
I didn’t think that was too bad…until I noticed that the bots were now attempting to log into my mailserver. I’ve installed fail2ban. Hopefully this blocks some IPs and slows down this attack.
No Comments »
RSS feed for comments on this post. TrackBack URL
Leave a comment
You must be logged in to post a comment.