News for hackers. Stuff that matters.

A comment on A Linux botnet is launching crippling DDoS attacks in excess of 150Gbps. Parent comment

Re:A Linux botnet is launching crippling DDoS attacks in exc... by SixSigma on Wednesday September 30, 2015 @07:19AM (#10303071)
That's been going on for years.

Move port from 22 to somewhere else.

Install fail2ban

[ Parent | on HN ]
Re:A Linux botnet is launching crippling DDoS attacks in exc... by swills on Wednesday September 30, 2015 @09:33AM (#10303779)
It's also fun to change the encryption:

KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256

Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr

MACs [email protected],[email protected]

in sshd_config. From what I've seen, the brute forcers can't work with this. (If you're sshd doesn't: upgrade)

[ Parent | on HN ]
Re:A Linux botnet is launching crippling DDoS attacks in exc... by throwaway2048 on Wednesday September 30, 2015 @09:52AM (#10303927)
its worth noting that essentially only openssh clients will work with these settings, and newer ones at that.
[ Parent | on HN ]