Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote -9 down vote favorite

It is purely a testing server. There are no public links to any of the testing sites I'm running on it.

It's a dedicated server hosted by Single Hop (Chicago area).

I'm annoyed that I now have to worry about attacks on a server that should be more or less invisible.

share|improve this question
3  
Is this a question or just an expression of you being annoyed? Just because a server doesnt have public links does not make it invisible - bot nets can scan entire ip/port ranges for listening services. Can you provide more detail as to the nature of the attacks so that we can offer you some assistance with how to prevent them? – WerkkreW Apr 11 '12 at 19:34
1  
3  
If it's purely a testing server get it off the Internet - It should be on an internal testing network (or at least firewalled off for its own protection. You should firewall your production systems too - It' hasn't been safe to leave a system with no firewall on the public Internet since before Al Gore invented the thing!) – voretaq7♦ Apr 11 '12 at 19:46
3  
Do you want to run an Internet server or not? If you do, you have to run it. That means configuring and maintaining firewalls, among other things. If not, don't connect it to the Internet or connect it through an external firewall that someone else manages. – David Schwartz Apr 11 '12 at 19:48
1  
What do you mean by under attack, what are you running on it that you think is under attack, what are you doing now to protect it, what is is currently behind as a firewall, and are you sure it's not just something port scanning for services? It's not like you register your server with a central directory in order for the Googles to find it. It's not hard for IP's to be automatically scanned... – Bart Silverstrim Apr 11 '12 at 20:32

1 Answer

up vote 15 down vote

Welcome to the internet, it's normal. They just try every server with some exploit/random username password to get in. If it annoys/scares you, get some protection in place like OSSEC.

If you have an IP you are visible unless you drop every single port connection in your firewall.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.