Security question

You're connected to the Internet, so other things on the Internet will try to see if they can break into your server. This is normal.

Best way to avoid it: "PermitRootLogin no" and "PasswordAuthentication no" in /etc/ssh/sshd_config (note: set up key-based authentication first), and make sure logrotate is installed so that your logs are kept to a manageable size.

I wouldn't agree it is normal and would say this is certanly something that should be treated as crime. But I should take more precaution.

I do still use root, and I heard it is not good. Now I see why. How do I create some other user that has all the access and how do I create key and use it with putty? I am a noob here, so please give me some short instructions or recommendations. Has Linode got some tutorial on this?

p.s.

I see IP trying to break in some China web http://www.apnic.net/

You may certainly treat it as a crime if you wish. You'd probably have better success enforcing turn signal laws on Boston expressways, however: there are fewer drivers in Boston than there are hijacked systems on the Internet.

This page is probably what you're after: http://library.linode.com/securing-your-server

I am just saying it shouldn't be said as "normal" but I know I can expect that. Thanx on link and this info.

nor·mal

/ˈnôrməl/

Adjective

Conforming to a standard; usual,typical, or expected.

Noun

The usual, average, or typical state or condition.

Synonyms

adjective. regular - standard - ordinary - common - usual

noun. normality - normalcy - perpendicular

It definitely is normal. Every server you put on the internet is going to get, often within a matter of minutes, various probes from people trying to compromise the system. This will occur regularly for the life of the server (in other words, forever).

If you wanted to treat it as a crime, you'd spend the rest of your life trying to investigate and file charges against the millions of such requests your server will get.