4

1000's of Audit Failure Logon Attempts to Admin Account

view full story
linux-howto

http://serverfault.com – I was just going through the logs of one of my servers and I noticed there are a ton of failed logon attempts for username Administrator, owner and Admin. I assume that these are bots since there is almost one every second, but my question is what do you normally do about this? I am new to server security, but from what I have been reading most people don't seem too concerned with this type of thing. When you try to remote desktop into a windows system, don't you only have a few tries before being locked out for a bit? I have 63 minutes worth or failed logon attempts every ~1.3 seconds fro (HowTos)