Report this

What is the reason for this report?

Is anyone else being brute forced by Chinese IP addresses?

Posted on April 21, 2015

So for the past few days i’v been keeping track of my fail2ban logs and noticed that a ton of Chinese ip addresses are being banned. It seems from my auth.log they are trying to brute force there way into my root account. I was wondering if anyone else is experiencing this and if its something I should report directly to DigitalOcean?



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

I use this to help track and help block these assbaskets: https://www.abuseipdb.com/

Welcome to the club, it’s nothing unusual.

Thanks for the tips. I will for sure be switching to cloudflare I didn’t realize they had a free plan and I will also switch the default port of my ssh. Is it good practice to also switch the default port of my web server?

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.