how block this access in my SSH (have Hacks Shut Down Channels of my server)

[magraopb]

how block this

[MentaL]

[maxgo1]

Change the PW on Centos and MSSQL

[magraopb]

Change the PW on Centos and MSSQL

these attacks do not use the root password, they use a system of brute force and down the channels

[cypher]

service sshd stop .

[poison100]

u can use iptables to block. i mena block port 22 for network and open only for lan or for ip what u want.

iptables -A INPUT -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -A INPUT -p tcp --dport -s IP-LAN -j ACCEPT

And this is all.

[magraopb]

u can use iptables to block. i mena block port 22 for network and open only for lan or for ip what u want.

iptables -A INPUT -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -A INPUT -p tcp --dport -s IP-LAN -j ACCEPT

And this is all.

if i use this i have access only host windows on same range of IPS in lan?

[poison100]

if i use this i have access only host windows on same range of IPS in lan?

:) u can use it for range or single ip :)
for range
iptables -A INPUT -p tcp --dport 22 -s 192.168.X.0/24 -j ACCEPT

X = ur numer ip :)

[magraopb]

ok thanks for tell me, i go make a tests

u can use iptables to block. i mena block port 22 for network and open only for lan or for ip what u want.

iptables -A INPUT -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -A INPUT -p tcp --dport -s IP-LAN -j ACCEPT

And this is all.

This comands not work for me

how ai can block all external IP and give access only internal IP on windows server?

[poison100]

This comands not work for me

how ai can block all external IP and give access only internal IP on windows server?

o_O so u can too change port for SSH from 22 to 2222 or other in /etc/ssh/sshd_config :)

and restart it /etc/init.d/sshd restart :) this is more easy :)

[magraopb]

LPI with a professional certificate in linux made some changes to me and stopped the attacks from hackers, but from time to time the channels still fall.
And I'm losing players because of it


all channels fall, only the channel of TG is online

[cypher]

thats call ddos, try looking in raw connection logs and see what`s causing it.

[magraopb]

yes i know is DDos, before i receive message "bye bye" in logs and the channels down,
now i not receive this message because the professional in Linux whit Certified LPI make a security in my server.
Now the falls are less constant, but some still fall


*i cleaned the logs and in next drop the channels i show the logs

[cypher]

close your ssh server see if they can stil connect.

[magraopb]

Logs of my Cabal Server

http://blackgamesonline.com/download/Cabal_Logs.rar

in WorldSvr_01_XX i changed IP of CentOS to "CentOS IP"

I will go show logs of SSH after

[poison100]

ddos hehe :) u can call to ur isp to block it :) or for special firewall :) i think all isp can do it now :) I have the same problem with ssh logs "bye bye" But i counter attack this ip in logs :)

[magraopb]

i don't have more problems with "bye bye" in the logs, but the channels still sometimes fall.
before I no have this problem