Pertanyaan tentang config server security & firewall


Status
Not open for further replies.

Brian Aditya

Poster 1.0
siang Tuan2
saya mau bertanya, saya mengistal csf di vps saya

lalu saya membuka email saya,

setiap berapa menit pasti ada pemberitahuan yg masuk ke email saaya seperati ini
Time: Tue Jul 25 12:34:27 2017 +0700
IP: 91.197.232.107 (CZ/Czech Republic/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked: Permanent Block

Log entries:

Jul 25 12:34:20 server sshd[5556]: Invalid user 0 from 91.197.232.107
Jul 25 12:34:21 server sshd[5556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.107
Jul 25 12:34:23 server sshd[5556]: Failed password for invalid user 0 from 91.197.232.107 port 35594 ssh2
Jul 25 12:34:23 server sshd[5560]: Invalid user 0000 from 91.197.232.107
Jul 25 12:34:23 server sshd[5560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.232.107

--------------------------------------------------------------------------------------------------------------




dan ini
Time: Tue Jul 25 13:55:40 2017 +0700
IP: 138.19.133.51 (HK/Hong Kong/138019133051.ctinets.com)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked: Permanent Block

Log entries:

Jul 25 13:55:27 server sshd[8770]: Failed password for root from 138.19.133.51 port 47970 ssh2
Jul 25 13:55:30 server sshd[8770]: Failed password for root from 138.19.133.51 port 47970 ssh2
Jul 25 13:55:32 server sshd[8770]: Failed password for root from 138.19.133.51 port 47970 ssh2
Jul 25 13:55:34 server sshd[8770]: Failed password for root from 138.19.133.51 port 47970 ssh2
Jul 25 13:55:37 server sshd[8770]: Failed password for root from 138.19.133.51 port 47970 ssh2

saya bingung ini kenpa,ada yang tau>
saya rasa ini ip yg mw masuk ke root saya,agar security menjadi lebih kuat,bagaimana caranya Tuan2
 

rackh

Poster 1.0
Verified Provider
port SSH ganti,,, login root disable ganti ke sudo user ,,, kasih firewall hanya ip tertentu yang bisa akses ke ssh :D
 
Status
Not open for further replies.

Top