Brute force attempts in servers are pretty old news. If you're running a public facing ssh server, it will be found and it will be tried. My solution is to disa

Brute force attempts in servers are pretty old news. If you're running a public facing ssh server, it will be found and it will be tried. My solution is to disable passwords and put the server on a non-standard port (yeah, users could try to crash sshd and steal its port, but then my ssh client will complain about a key mismatch; if my servers actually had other users I'd probably consider using iptables to forward all incoming traffic on port 12345 to 22 instead, and drop other non-forwarded traffic on 22). If you don't trust your users to have strong passwords and are forced to allow passwords, use fail2ban. Edit: With the prominent pluralsight ads this link feels like an ad overall.