Discover Top Posts Tagged with #brute-force-attacks

Fixed: Securing SSH server against bruteforcing #solution #programming #computers

Securing SSH server against bruteforcing

I have a little SVN server, old dell optiplex running debian. I don’t have that high demands on my server, because its just a little SVN server… but do want it to be secure.

I just renewed my server to a newer and better optiplex, and started looking a bit into the old server. I took it down after experiencing problems. When I check the logs, its full of…

View On WordPress

#brute-force-attacks #security #ssh

How to: Preventing brute-force attacks on MySQL? #programming #solution #fix

Preventing brute-force attacks on MySQL?

I need to turn on networking for MySQLd, but every time I do, the server gets brute-forced into oblivion. Some mean password guessing script starts hammering on the server, opening a connection on port 3306 and trying random passwords forever.

How can I stop this from happening?

For SSH, I use denyhosts, which works well. Is there a way to make denyhosts…

View On WordPress

#brute-force-attacks #mysql

How-to: Preventing brute force attacks against ssh? #programming #it #answer

Preventing brute force attacks against ssh?

What tool or technique do you use to prevent brute force attacks against your ssh port. I noticed in my Security logs, that I have millions of attempts to login as various users through ssh.

This is on a FreeBSD box, but I imagine it would be applicable anywhere.

Answer [by trent]: Preventing brute force attacks against ssh?

One of the easiest ways to…

View On WordPress

#brute-force-attacks #security #ssh

Resolved: Virus that tries to brute force attack Active Directory users (in alphabetical order)? #fix #it #solution

Virus that tries to brute force attack Active Directory users (in alphabetical order)?

Users started complaining about slow network speed so I fired up Wireshark. Did some checking and found many PCs sending packets similar to the following: (screenshot) http://imgur.com/45VlI.png

I blurred out the text for the username, computer name and domain name (since it matches the internet domain name).…

View On WordPress

#active directory #brute-force-attacks #kerberos #security #virus

Answer: Rate limiting with UFW: setting limits #solution #development #answer

Rate limiting with UFW: setting limits

UFW’s man page mentions that it can setup iptables rate limiting for me:

ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw will deny connections if an IP address has attempted to initiate 6 or more connections in the last 30 seconds. See http://www.debian-administration.org/articles/187for details.…

View On WordPress

#brute-force-attacks #firewall #rate-limiting #security #ufw

How-to: How secure are passwords with under 20 characters length? #dev #answer #development

How secure are passwords with under 20 characters length?

I recently received a recommandation for setting my password to above 20 characters. The algorithm used for encryption is AES with a 256 bit primary key. How secure is a, let’s say, 8 char password against brute force attacks for deciphering encrypted files?

I know that this is considered a good password size on most websites. One reason…

View On WordPress

#brute-force-attacks #Encryption #password

How-to: Equivalent to denyhosts, but for HTTP requests? #answer #it #solution

Equivalent to denyhosts, but for HTTP requests?

My web server (apache2) is continually pounded by malicious bots, asking for URLs like these:

/blog/tag/pnphpbb2//index.php?name=PNphpBB2&file=posting&mode=quote/index.php?name=PNphpBB2&file=viewtopic&p=34004/viewtopic.php?p=15&sid=be4c914eb746ac7c96beea717fdfc692/&highlight=../../../../../../../../../../../../../etc/passwd%00 HTTP Response 301…

View On WordPress

#apache-2.2 #brute-force-attacks #linux #spam #webserver

Resolved: Denyhosts vs fail2ban vs iptables- best way to prevent brute force logons? #computers #programming #development

Denyhosts vs fail2ban vs iptables- best way to prevent brute force logons?

I’m setting up a LAMP server and need to prevent SSH/FTP/etc. brute-force logon attempts from succeeding. I’ve seen many recommendations for both denyhosts and fail2ban, but few comparisons of the two. I also read that an IPTables rule can fill the same function.

Why would I choose one of these methods over another? How…

View On WordPress

#brute-force-attacks #denyhosts #fail2ban #iptables

#brute-force-attacks

Trending Tags

Recently Viewed Tags

#brute-force-attacks