R
6

Hit 50,000 blocked login attempts on my server in one week

I run a small personal site, nothing important, but last Tuesday I checked the logs and saw 50,000 bots trying to brute force into it in just 7 days. That's way more than I expected for something with like 100 monthly visitors. Have you guys checked your own server logs lately?
3 comments

Log in to join the discussion

Log In
3 Comments
miabennett
miabennett13d ago
50k attempts for 100 visitors is crazy, @michael_jones that's insane.
6
miles_perez
damn 50,000 in a week that's insane. I mean I knew bot attacks were common but for a small personal site with only 100 visitors a month that just feels wild to me. It really makes you wonder how many bots are just constantly scanning every IP out there looking for weak spots. I checked my own server after you mentioned that and I'm sitting at around 12,000 attempts this week which is way more than I thought for a little blog that nobody reads. Those automated scripts must just be firing at every single open port they can find. Makes me want to double check my fail2ban setup again cause if they're hitting your site that hard nobody is safe.
4
michael_jones
Man, that is wild. @miles_perez I feel you on checking your own server after hearing that, I did the same thing and found way more junk than I expected. It really is just constant scanning, like they don't even care if the site is active or not, they just spam every port. Makes you wonder how much of the internet is just noise from bots trying to break in. Definitely time to tighten up fail2ban again, no point in making it easy for them.
6