Failed root login attempts on my Linode
Linode
Linode Staff
We have seen hundreds of attempts to login as "root" user in our linode. Please suggest a remedy for this.
1 Reply
rmoyer
Linode Staff
This is pretty standard behavior on a server that has not been appropriately secured. It is most often caused by automated scripting and its not generally an direct attack on your server. There are a few ways to prevent this:
Configure fail2ban which blocks multiple login attempts
Configure your firewall to block connections from unknown IP addresses. I'd recommend reviewing our guide for Centos - Firewalld or Debian - Ubuntu - UFW depending on your distro.
Of all the options, disabling the root password authentication is likely the easiest and I'd suggest doing that first.