3 ms·
As an alternative to ( 4 ), only expose your SSH servers over IPv6. Initially I thought this worked because the overwhelmingly huge address space, but even wh
by dingaling 13y ago
As an alternative to ( 4 ), only expose your SSH servers over IPv6.
Initially I thought this worked because the overwhelmingly huge address space, but even when I published come-get-me DNS records ( ssh.example.com ) there was not a single IPv6 attempt versus hundreds of IPv4 attempts every day on the same host.
Edit: there is plenty ( ~ 8% ) of inbound IPv6 web traffic to my hosts, so it's not a case of IPv6 being obscure. It just seems that none of the bad guys are interested.