Search found 5 matches

by sstonemaker
Sat Jun 19, 2010 8:08 pm
Forum: Dedicated servers and Virtual Dedicated Servers
Topic: How to block bots from attempting administrator login (windo
Replies: 9
Views: 3610

Re: How to block bots from attempting administrator login (w

Thankfully, NFO lets you connect to VDSs via VNC client also - which I believe uses a separate VNC server on their network. So when my ISP changes my IP address, which isn't very often, I simply connect via VNC client, adjust the firewall rule with the new scope/ip, and carry on with my business. Si...
by sstonemaker
Tue Jun 08, 2010 1:02 pm
Forum: Dedicated servers and Virtual Dedicated Servers
Topic: How to block bots from attempting administrator login (windo
Replies: 9
Views: 3610

Re: How to block bots from attempting administrator login (w

Below are the details from a failed security audit (from event viewer). According to the explanation at the bottom, these attempts could be coming from the network via Server service. And Logon Type 3 confirms this to be a network attempt. However, Server service had already been disabled. So I am u...
by sstonemaker
Tue Jun 08, 2010 12:40 pm
Forum: Dedicated servers and Virtual Dedicated Servers
Topic: How to block bots from attempting administrator login (windo
Replies: 9
Views: 3610

Re: How to block bots from attempting administrator login (w

One other tidbit to add to my response above:

I've modified the default Remote Desktop firewall rule to only allow access from my local ip address (remote to the server). Please let me know the potential that my ip address is being successfully spoofed.
by sstonemaker
Tue Jun 08, 2010 12:35 pm
Forum: Dedicated servers and Virtual Dedicated Servers
Topic: How to block bots from attempting administrator login (windo
Replies: 9
Views: 3610

Re: How to block bots from attempting administrator login (w

I followed the procedure, and I don't quite know the impact of disabling certain services, so I am highly cautious. But I wonder how any of these services can be used to attempt authentication on the server? Isn't authentication reserved for certain port(s), and via TCP? This is the part that has me...
by sstonemaker
Mon Jun 07, 2010 9:41 pm
Forum: Dedicated servers and Virtual Dedicated Servers
Topic: How to block bots from attempting administrator login (windo
Replies: 9
Views: 3610

How to block bots from attempting administrator login (windo

Hi: I blocked remote desktop default port 3389 from all but my local ip address through an adjusted firewall rule, but it did not stop a bot from successfully attempting to access the server. The firewall rule works, because I tried entering a different ip address from my local ip address, and it di...