Web Hosting Talk







View Full Version : Someone is attacking to my server, what can i do?


lover
10-15-2003, 07:59 PM
Someone from one ip tries to get ftp admin password. I think it is a kind of bruteforce. My server is windows 2003 web edition
He has been attacking my server from last week.
I make some research on ip number and see that it has been banned from some isp's because of spam.
He is really serious, because he has been trying to go in for one week.
What can i do? Should i setup norton personal firewall?
My service provided(superb servers) did not me bring a real solution.
I am a bit of helpless, please make some suggestion to prevent it.
Or is it a normal situation? Have you ever had such problem?
Thank you

John[H4Y]
10-15-2003, 11:40 PM
Yes, get a firewall and block the IP address.

goldenplanet
10-16-2003, 05:46 AM
- or you could just kick him out by using the built-in IPSec function. You'll find a primer on the subject here:

http://www.petri.co.il/ipsec_block_ping.htm

lover
10-16-2003, 04:57 PM
Tahank you very much;
But wich firewall do you suggest?
I heard that some of firewalls doesnt allow remote desktop connections.
Does the firewall stop my connection with my server?
My server is in another country from me. So i cant go and setup it.
I have to setup via remote desktop connection.

iguana
10-16-2003, 06:57 PM
Thats Rite..

Maybe you will need some help on the DC. I heard that exist a FW that doesnt disconect u after install but i cant remember.

Good luck

sprintserve
10-17-2003, 07:42 AM
Which NIC does your server has? Intel 10/100 NICS have inbuilt ipsec (nice feature).

Firewalls are just a software. It will allow/or disallow based on your defined rules. So if you allow your remote desktop software ports or applications, it will work.

If you lock yourself out accidently, just ask the data center to configure it for you.