3 ms·
Hi, it is more than likely hackers attempting to exploit your system. This looks like probably an automated bot scanning your server. The best suggestion? Do
by theonewolf 12y ago
Hi, it is more than likely hackers attempting to exploit your system.
This looks like probably an automated bot scanning your server.
The best suggestion? Don't expose non-production-ready web apps to the Internet.
Use port-forwarding via ssh to selectively expose things.
If you haven't already, also immediately turn on your firewall in the VM (make sure port 22 is open for ssh).
- theonewolf 12y agoOne more thought: check /var/log/auth.log You will probably see lots of attempts of logging into your system by bad guys (bots). I often even change my ssh port to something like 2424 and get rid of practically all scanning bots.
- S4M 12y agoThanks for the suggestions. Yes, I checked /var/log/auth.log and I saw some strange IPs trying to ssh as root. Good idea to change the ssh port.