News for hackers. Stuff that matters.

A comment on A Linux botnet is launching crippling DDoS attacks in excess of 150Gbps. Parent comment

Re:A Linux botnet is launching crippling DDoS attacks in exc... by jasonoliveira on Wednesday September 30, 2015 @12:08PM (#10304940)
so fail2ban, disabling root logins, and key-based authentication are the answer?
[ Parent | on HN ]
Re:A Linux botnet is launching crippling DDoS attacks in exc... by dredmorbius on Wednesday September 30, 2015 @12:22PM (#10305038)
A large portion of it, yes.

Limiting SSH to specific IPs or netblocks, and/or specifically excluding those you're likely to never use, would also help cut down on the attack surface. Not that hosts within your perimiter don't get compromised, but there are far fewer of them.

2FA including keyfobs is yet another option.

[ Parent | on HN ]
Re:A Linux botnet is launching crippling DDoS attacks in exc... by thebakeshow on Wednesday September 30, 2015 @06:16PM (#10307796)
Port knocking can help also
[ Parent | on HN ]