authentication failure

[Jacx]

Hi all,

i am new to proxmox, just installed this week.

when i check the log is see constant errors about login failure.
can some one tell me if this is normal.

Dec 16 18:26:46 pvedaemon[1101]: authentication failure; rhost=::ffff:141.98.11.50 user=root@pam msg=Authentication failure
Dec 16 18:27:07 unix_chkpwd[168534]: password check failed for user (root)
Dec 16 18:27:07 IPCC.xs[1101]: pam_unix(proxmox-ve-auth:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:141.98.11.50 user=root

 

[bbgeek17]

Hi @Jacx , welcome to the forum.

Looks like you exposed your PVE to the Internet and as such you are subject to immediate automated attacks. I would highly recommend rethinking your deployment, or, at the very least, implementing very strict inbound firewall.

Good luck

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[fstrankowski]

Besides what @bbgeek17 said, i'd suggest you either setup Proxmox Managment Side to only be accessible via VPN - or - if you know Linux, you can just close port 8006 and tunnel it through SSH and thus only need SSH open via firewall.

You can move SSH to a complete random port (e.g 27481) and have a way smaller attack vector. Another important advice: Fail2Ban. There are presets for Proxmox UI and it takes 5 minutes to setup.

 

[Jacx]

@bbgeek17, @fstrankowski

thanks for the fast respons