3 ms·
In the last two months, I've been getting lots of bruteforce scan attempts on all my boxes that run ssh on high ports, so it seems this is no longer as effectiv
by 0x0 7y ago
In the last two months, I've been getting lots of bruteforce scan attempts on all my boxes that run ssh on high ports, so it seems this is no longer as effective as it was :-/
- geocrasher 7y agoYou are not alone in this. This week I actually changed ports for ssh because of the sheer number of brute force attempts. We'll see how long that holds out.
- ru552 7y agoWhy not just restrict access to specific IP blocks? Even if you left it open to Verizon's entire IP space so you can hit it with your cell, you would still dramatically lower your incident rate.
- geocrasher 7y agoYeah I could do that I suppose. I host several people on it however. Right now the unique port is enough.
- tlavoie 7y agoWhy not just use fail2ban or similar, to automatically block the ninnies for a while after a few attempts?
- geocrasher 7y agoYup, using LFD for that purpose. There's still a lot of attempts.
- zamadatix 7y agoFor personal ssh port knocking is a fun solution.