Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm kind of confused right now recently my friend who also take care of the server got an email from the DirectAdmin say that we got Brute-Attack with one of the IP from Italy, but I didn't get a chance to look at the scree.

Our Virtualbox run on Xserver and everytime now when my server down is because it crashes, so I wonder if that because our server got Brute-Attack?

My friend told me that it might be from one of hater from other website who is trying to get our website down.

How can I check the log or to prevent from this to keep happening?

We are running CentOS 5


share|improve this question

closed as off-topic by HopelessN00b Apr 9 '15 at 1:47

  • This question does not appear to be about server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

possible duplicate of My server's been hacked EMERGENCY – MDMarra Apr 19 '12 at 14:20
up vote 1 down vote accepted

Depends on what you mean when you're talking about your brute force attack.

If you are talking about your web server getting brute forced (someone is guessing passwords in a methodical manner) you just check your web server's logs. You don't say what you're running but it should have logs of page accesses. See what IP is constantly hitting the same login page. It's probably under /var/log/ somewhere.

If you really mean you're being denial of serviced, check your logs again, or check your router/firewall logs. When you find the constant stream of IP's, block it at the ingress point on your firewall.

If it's saturating your bandwidth, contact your upstream provider and have that IP blocked farther up the connection, and relieve the stress on your connection.

Gather some statistics programs for analyzing your web server logs and see what they reveal in your traffic patterns.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.