3 ms·
That's been going on for years. Move port from 22 to somewhere else. Install fail2ban
by SixSigma 11y ago
That's been going on for years.
Move port from 22 to somewhere else.
Install fail2ban
- swills 11y agoIt's also fun to change the encryption: KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com in sshd_config. From what I've seen, the brute forcers can't work with this. (If you're sshd doesn't: upgrade)
- throwaway2048 11y agoits worth noting that essentially only openssh clients will work with these settings, and newer ones at that.