Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: amaclin on January 17, 2016, 08:47:33 AM



Title: RDP attacks to bitcoin nodes
Post by: amaclin on January 17, 2016, 08:47:33 AM
I see a lot of attempts to gain access rights to the server with my bitcoin node.
Attackers try to connect to it with RDP (port 3389)
How can I block all incoming connections to 3389 except of my own IP-address?
Right now I add IP-addresses to a "black-list"
https://i.imgur.com/tAZSFXE.png


Title: Re: RDP attacks to bitcoin nodes
Post by: p2pbucks on January 17, 2016, 08:54:59 AM
3389 port is for remote desktop protocol on windows ,  everyone can connect remote windows server via RDP  .
SO ... Hackers always like testing 3389 port using weak password  no matter what services you run  :-\


Title: Re: RDP attacks to bitcoin nodes
Post by: Lauda on January 17, 2016, 08:58:30 AM
You can try this: Limiting access of RDP to a certain IP only.  (http://serverfault.com/questions/361886/limiting-access-of-rdp-to-a-certain-ip-only) It has two suggestions (the firewall one might be harder depending on experience). Another thing, this section isn't for discussions such as this one.