Brute Force Attack

[papagmp]

AFF sent 250% more hits last night than I got from legitimate traffic. Somebody also hammered the pay site (can't prove who this was yet).

Over 64000 attempts to crack the ftp, ssh, and the member's area.

As far as we can see, no breaches but the fuckers killed my bandwidth and slammed the server.

We've implemented security procedures to reduce the impact on the server but I still have a bunch of work ahead of me.

As an added note: A few affiliates had passwords on the pay-site(s) with weak passwords - I'll be changing (or have changed) those passwords. Our auto-enroll password system is pretty FN good but a few of the ones I loaded manually are not cryptic enough for my linking.

[raymor]

Originally Posted by papagmp

AFF sent 250% more hits last night than I got from legitimate traffic. Somebody also hammered the pay site (can't prove who this was yet).

Over 64000 attempts to crack the ftp, ssh, and the member's area.

We have brute force protection systems available for all of these daemons
which not only prevent them from getting in, but greatly reduce the server
load they cause. Let us know if we can be of help.