Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It is purely a testing server. There are no public links to any of the testing sites I'm running on it.

It's a dedicated server hosted by Single Hop (Chicago area).

I'm annoyed that I now have to worry about attacks on a server that should be more or less invisible.

share|improve this question

closed as off-topic by kasperd, Jenny D, mdpc, Falcon Momot, Rex Aug 20 '14 at 20:32

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must demonstrate a minimal understanding of the problem being solved. Try including attempted solutions, why they didn't work, and the expected results. See How can I ask better questions on Server Fault? for further guidance." – kasperd, Jenny D, Falcon Momot, Rex
If this question can be reworded to fit the rules in the help center, please edit the question.

Is this a question or just an expression of you being annoyed? Just because a server doesnt have public links does not make it invisible - bot nets can scan entire ip/port ranges for listening services. Can you provide more detail as to the nature of the attacks so that we can offer you some assistance with how to prevent them? – WerkkreW Apr 11 '12 at 19:34
If it's purely a testing server get it off the Internet - It should be on an internal testing network (or at least firewalled off for its own protection. You should firewall your production systems too - It' hasn't been safe to leave a system with no firewall on the public Internet since before Al Gore invented the thing!) – voretaq7 Apr 11 '12 at 19:46
Do you want to run an Internet server or not? If you do, you have to run it. That means configuring and maintaining firewalls, among other things. If not, don't connect it to the Internet or connect it through an external firewall that someone else manages. – David Schwartz Apr 11 '12 at 19:48
What do you mean by under attack, what are you running on it that you think is under attack, what are you doing now to protect it, what is is currently behind as a firewall, and are you sure it's not just something port scanning for services? It's not like you register your server with a central directory in order for the Googles to find it. It's not hard for IP's to be automatically scanned... – Bart Silverstrim Apr 11 '12 at 20:32

Welcome to the internet, it's normal. They just try every server with some exploit/random username password to get in. If it annoys/scares you, get some protection in place like OSSEC.

If you have an IP you are visible unless you drop every single port connection in your firewall.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.