6 ms·
> Second: a long, un-detected brute force? Bull. About 6 years ago this happened to us. A slow but persistent SSH brute force was targeting one of our servers.
by iuguy 16y ago
> Second: a long, un-detected brute force? Bull.
About 6 years ago this happened to us. A slow but persistent SSH brute force was targeting one of our servers. After we spotted it (it was an SSH brute force and because it was slow we didn't detect it over the noise of general SSH scans on port 22) we switched to public key auth only on the server and installed fail2ban.
- anthonyb 16y agoI wouldn't really count that as a brute force attack. That just comes with having an SSH server on the internet.