[rmbyrro]

Wait, who's using SSH pass auth?

Folks, private keys. Change your SSH port and use an SSH tarpit on port 22.

[FergusArgyll]

How necessary is it to change ssh ports? You can't really spray/brute force a private key

[rmbyrro]

It's not "necessary", but, when combined with a tarpit on port 22:

1. You can monitor if your private key is compromised and automatically rotate it.

2. It's fun to mess around with hackers and script kidies.

[twosdai]

The tarpit on 22 is amazing. I love looking at all the access logs every fee months and seeing connection attempts that last minutes.