Server help please - GoFuckYourself.com

baddog · 01-09-2005, 04:04 PM

One of my clients is being subjected to a masssive brute force attack today. His server has been crawling all day and he can't figure out how to stop it.

Is there a way to limit the number of failed login attempts or limit them to 1 every 30 seconds? Possibly a server configuration?

Thank you in advance

DarkJedi · 01-09-2005, 04:08 PM

http://www.pennywize.com/

hyper · 01-09-2005, 04:09 PM

strongbox

http://www.bettercgi.com/strongbox/

fusionx · 01-09-2005, 04:22 PM

Quote:

Originally Posted by hyper

strongbox

http://www.bettercgi.com/strongbox/

Definately talk to Ray - he's top notch

baddog · 01-09-2005, 04:24 PM

Quote:

Originally Posted by DarkJedi

http://www.pennywize.com/

Already using it.

baddog · 01-09-2005, 04:25 PM

Quote:

Originally Posted by hyper

strongbox

http://www.bettercgi.com/strongbox/

Thanks

killshot · 01-09-2005, 04:35 PM

i prefer www.proxypass.com

With proxypass my server has withstood over a million attempts per hour and had no visible slowdown

proxypass blocks the open proxies people use in attacks before it even hits your server

webair · 01-09-2005, 04:37 PM

host should be able to clear that up

pussyluver · 01-09-2005, 04:38 PM

Server OS? Linux I assume. By client I assume you mean you're the host. My first resposne was to call your hosting company. I have picked up a lot of usefull info at rackshack even though I don't host there.

Situations like this, ya need somebody smart (smarter than me). You know a ton of people baddog. Do you have a working relationship with smokey? I'd have to hit the boards and support sites like you are doing already. Problem is time is of the essence...

If you had a couple of days to reslove it, options come to mind. A right now stop = panic attack. Other problem is you might stop this spider and stop others that you want.

Good luck mon. The solution is of major interest here.

Strongbox had some usefull info. Have some dumb ideas if you want 'em, but you're prolly way ahead of me on them.

pussyluver · 01-09-2005, 04:40 PM

Quote:

Originally Posted by killshot

i prefer www.proxypass.com

With proxypass my server has withstood over a million attempts per hour and had no visible slowdown

proxypass blocks the open proxies people use in attacks before it even hits your server

Thanks for that link

Morgan · 01-09-2005, 05:16 PM

proxypass

01-09-2005, 04:04 PM	#1
baddog So Fucking Banned Industry Role: Join Date: Apr 2001 Location: the beach, SoCal Posts: 107,089	Server help please One of my clients is being subjected to a masssive brute force attack today. His server has been crawling all day and he can't figure out how to stop it. Is there a way to limit the number of failed login attempts or limit them to 1 every 30 seconds? Possibly a server configuration? Thank you in advance

01-09-2005, 04:09 PM	#3
hyper Confirmed User Join Date: Mar 2002 Location: Mass Ass Posts: 5,294	strongbox http://www.bettercgi.com/strongbox/ __________________

01-09-2005, 04:35 PM	#7
killshot Confirmed User Industry Role: Join Date: Dec 2004 Location: OGG / PDX Posts: 456	i prefer www.proxypass.com With proxypass my server has withstood over a million attempts per hour and had no visible slowdown proxypass blocks the open proxies people use in attacks before it even hits your server __________________

01-09-2005, 04:37 PM	#8
webair Confirmed User Industry Role: Join Date: Feb 2002 Location: NYC, NY Posts: 8,531	host should be able to clear that up __________________ ~ Webair Dedicated Cloud Servers™ ~ WEBAIR VSYS™ Virtual Hosting Platform ~ Superior CDN Network ~ ~ Managed Dedicated hosting Specialists ~ DISCOUNT DOMAIN NAMES! ~ WEBAIR FUSION IO MANAGED CLOUD SERVERS! ~ *ICQ:* 243116321 - *TWITTER* - @WEBAIRINC - E-Mail: [email protected]

01-09-2005, 05:16 PM	#11
Morgan Too lazy to set a custom title Industry Role: Join Date: May 2002 Location: Corona Del Mar, CA Posts: 10,520	proxypass __________________ PornstarPlatinum.com \| TransErotica.com

01-09-2005, 04:08 PM	#2
DarkJedi No Refunds Issued. Industry Role: Join Date: Feb 2001 Location: GFY Posts: 28,300	http://www.pennywize.com/

01-09-2005, 04:38 PM	#9
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	Server OS? Linux I assume. By client I assume you mean you're the host. My first resposne was to call your hosting company. I have picked up a lot of usefull info at rackshack even though I don't host there. Situations like this, ya need somebody smart (smarter than me). You know a ton of people baddog. Do you have a working relationship with smokey? I'd have to hit the boards and support sites like you are doing already. Problem is time is of the essence... If you had a couple of days to reslove it, options come to mind. A right now stop = panic attack. Other problem is you might stop this spider and stop others that you want. Good luck mon. The solution is of major interest here. Strongbox had some usefull info. Have some dumb ideas if you want 'em, but you're prolly way ahead of me on them.