Hacker News new | ask | show | jobs
by simoncion 4017 days ago
shrug I would recommend deactivating password logins and using only key-based logins.

In the many, many, many months I've had my internet-facing IPv6-enabled SSH servers online, I've only received one bogus SSH connection attempt from an IPv6 address at the University of Michigan.
2 comments
ams6110 4016 days ago
That will change though. I receive hundreds of IPv4 connection attempts every day, as more systems move to IPv6 so will the attacks.

Interesting though is that covering the entire IPv6 space is a much larger task. That should hold down the volume of random attempts for a while, just by dilution effect.

link
ars 4016 days ago
> I would recommend deactivating password logins and using only key-based logins.

I do that when I can, but sometimes it's not possible.

Also, fail2ban works for other things besides ssh, which I need.

link