2 ms·
The first thing you need to do on any new Linux server installation: sudo apt install fail2ban # Choose your flavour And you get rid of most pesky SSH knocki
by miohtama 3y ago
The first thing you need to do on any new Linux server installation:
sudo apt install fail2ban # Choose your flavour
And you get rid of most pesky SSH knocking traffic and credential stuffing attacks.
- seanp2k2 3y agoChanging the port to anything other than 22 does this as well.
- zimpenfish 3y agoChanging the port reduces the traffic, yep, but definitely doesn't get rid of it - all my servers use non-standard ports for ssh and there's still ~10 login attempts a minute.
- dizhn 3y ago2244 ? I used to get almost no tries on 2244 which is kind of an obvious choice. Nowadays I have wireguard and no ssh ports exposed as they run on private IPs.