Re: are you also seeing more ssh attacks ?

Gert Doering <[email protected]> Mon, 2 Jul 2018 19:37:39 +0200

Newsgroups	gmane.org.operators.swinog
Message-ID	<[email protected]>

Hi,

On Mon, Jul 02, 2018 at 12:25:13PM +0200, Manuel Schweizer wrote:
> Not seeing what you are seeing, but I can really recommend Fail2Ban if you are not using it already.

Seconded.  Even if we do not allow "plain password" authentication on 
the Jumphost (it's using PIN + LinOTP tokens), if only to keep the noice
in the logs down and to annoy the brute-forcers a bit :-)

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279


_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog