[Decent12]

Hey there,
There are many peoples arround the world who are trying to hack and steal other people things and some of them setting up bots to spam other peoples forums etc so its normal 48 times is not a big deal i can tell you once i had created a smf forum and due to email sending problem i had setting registration system to instant without any verification they just spammed my forum with 2k+ posts

[Honey]

as others have already suggested, Its nothing to worry about its just bots trying to bruteforce your password, you could install tools to restrict login attempts or make a sudo account and disable login to root entirely if thats an option(not sure tbh, just an idea).

anyways, I recommend using this site, https://haveibeenpwned.com/

If you subscribe to it It always lets you know if your email pops up in a breach anywhere so that you can change your passwords.

[chanalku91]

I have experienced it. I think it was an attempted Brute Force attack
Because it broke the breakdown number of 81K
So I suggest using IPtables as a protection against this attack

/sbin/iptables -D INPUT -p tcp -m multiport --dports 22 -m conntrack --ctstate NEW -m recent --set --name antibrute
/sbin/iptables -D INPUT -p tcp -m multiport --dports 22 -m conntrack --ctstate NEW -m recent --update --seconds 3600000 --hitcount 1 -j DROP --name antibrute

[tiwil]

I see everyone say it's a bot. I think yes it is.
But for protection, I don't see anyone talking about fail2ban? I'm using fail2ban on every VPS I have.

Here is tutorial for it: https://post4vps.com/thread-205.html

Everytime I have complete new VPS, I follow that tutorial lol. Such a nice tutorial from @Dudi.

[chanalku91]

I see everyone say it's a bot. I think yes it is.
But for protection, I don't see anyone talking about fail2ban? I'm using fail2ban on every VPS I have.

Here is tutorial for it: https://post4vps.com/thread-205.html

Everytime I have complete new VPS, I follow that tutorial lol. Such a nice tutorial from @Dudi.

I don't use additional software like fail2ban because it will consume higher usage of CPU!
So things like fail2ban I don't use them