OCI Compute Instances – Stop SSH Brute Force Attacks with fail2ban & UseDNS

Every day and night, the SSH login by key into my public accessible Oracle Cloud Infrastructure Linux Compute Instance was permitted for hours. And sometimes, when I had luck, it worked. For me it was not clear when it works and when not. But something has blocked me. The password authentification in the OCI Linux instance is basically disabled, the key is the only way to log in. After some investigation on the OCI instance, I found a huge amount of login trials in the /var/log/secure file. These brute force attacks were locking me out! Nov 4 03:57:24 instance-as-1 sshd[1975]: Received disconnect from 132.232.17.146 port 53924:11: Normal Shutdown, Thank you for playing [preauth] Nov 4 03:57:24 instance-as-1 sshd[1975]: Disconnected from 132.232.17.146…

Read More

Easy Database Migration to Oracle Cloud Infrastructure OCI by Creating a Backup in the Cloud

Oracle has provided an updated OCI command line toolset with a new and easy method to migrate an on-premises database into the Oracle Cloud Infrastructure as DBaaS. According the document here, I have tried it out – and it works: https://docs.cloud.oracle.com/iaas/Content/Database/Tasks/mig-onprembackup.htm My Test Setup Oracle 18c Enterprise Edition with SID=ORA18 Single Tenant Architecture Oracle Linux 7.4 non TDE – Attention: non TDE on-premises data stays unencrypted in the cloud !!! Database and Server Prerequisites Archivelog Mode is enabled Parameter db_create_file_dest is set Server needs Internet Connection Oracle OCI CLI installed and configured – https://docs.cloud.oracle.com/iaas/Content/API/SDKDocs/cliinstall.htm#bash OPC Backup Module available –  https://www.oracle.com/technetwork/database/availability/oracle-cloud-backup-2162729.html Java installed – https://www.java.com/de/download/help/linux_x64rpm_install.xml The OCI CLI Directory  OCI CLI and opc_install.jar plus the .pem file have to be in the same directory. oracle@ol7ora18:~/migrate/…

Read More