Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The first thing you need to do on any new Linux server installation:

sudo apt install fail2ban # Choose your flavour

And you get rid of most pesky SSH knocking traffic and credential stuffing attacks.



Changing the port to anything other than 22 does this as well.


Changing the port reduces the traffic, yep, but definitely doesn't get rid of it - all my servers use non-standard ports for ssh and there's still ~10 login attempts a minute.


2244 ? I used to get almost no tries on 2244 which is kind of an obvious choice. Nowadays I have wireguard and no ssh ports exposed as they run on private IPs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: