3 Mar
2021
3 Mar
'21
19:24
Lew Wolfgang wrote:
Well, that you have any entries at all from sshd means that something is poking at the port it's listening on, right?
I would say so.
I just checked and I've got 942 entries like the following in the past four days, most from different IP's.
Oh yeah, the threat is certainly real. In February, our external (rented) servers had about 4-5000 such attempts, each. All configured for public key only, even so listening on a high port. Always with big time gaps, 5-10-15 minutes - true brute force was yesteryear. 44'244 attempts over twelve specific servers, 14'963 unique ipv4 addresses from 141 countries. -- Per Jessen, Zürich (6.2°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland.