3 ms·
shrug I would recommend deactivating password logins and using only key-based logins. In the many, many, many months I've had my internet-facing IPv6-enabled S
by simoncion 11y ago
shrug I would recommend deactivating password logins and using only key-based logins.
In the many, many, many months I've had my internet-facing IPv6-enabled SSH servers online, I've only received one bogus SSH connection attempt from an IPv6 address at the University of Michigan.
- ams6110 11y agoThat will change though. I receive hundreds of IPv4 connection attempts every day, as more systems move to IPv6 so will the attacks. Interesting though is that covering the entire IPv6 space is a much larger task. That should hold down the volume of random attempts for a while, just by dilution effect.
- ars 11y ago> I would recommend deactivating password logins and using only key-based logins. I do that when I can, but sometimes it's not possible. Also, fail2ban works for other things besides ssh, which I need.