4 ms·
how would fail2ban protect against a SSH or RDP vulnerability?
by droopyEyelids 4y ago
how would fail2ban protect against a SSH or RDP vulnerability?
- zamadatix 4y agoAgain say there were vulnerabilities due to sidechannels, vulnerabilities related to repetitive scanning with certain options, or weaknesses in the algorithms that allow for collisions much sooner than expected. If you're interesting enough to specifically be targeted by a distributed attack then hopefully you have additional layers while if you're just getting attacked for having an IP exposed on the internet IPS/IDS like fail2ban can be a pretty good first defense. In both cases it's great to feed your SIEM.