Event log messages... too many login messages from hackers

lorriman · Post by **lorriman** » 2005-04-29 16:33

Hi,

Ultr@vnc is getting alot of attempts at logins, so much so that most of my event log messages are from ultravnc. It makes the weekly event log check a real PITA.

I can't find a setting to switch this off (I don;t need to know about unsuccesfull attempts anyway).

Any chance of this in future?

Greg

joefu · Post by **joefu** » 2005-04-29 18:46

I wouldn't mind seeing UltraVNC breaking the log files up. One file will be all successful logins and a different log file of the unsuccessful ones.

To me the unsuccessful attempts are the most important. When I see multiple failed attempts to access my server, I start taking proactive actions. I will change the port UltraVNC is listening on. I start banning that address from accessing my server or a range of addresses.

Guest · Post by **Guest** » 2005-04-29 21:01

Would e nice to have a black list feature in Ultravnc, where you input a text file with IPs which are not allowed in.
If one of these IPs asks permission Ultravnc should reject it immediately and fire a warning in a log file.

OhMyGoat · Post by **OhMyGoat** » 2005-07-27 13:36

Well you can just change the ultravnc listen port to solve the problem. In fact, all that traffic is probably generated by people using special vnc scanners that look at the default vnc listening ports.