AS13335 doing SSH scanning

Re:AS13335 doing SSH scanning by t0mas88 on Saturday September 25, 2021 @02:28PM (#28655127)

I do the same, but only 10 minutes after 5 failed logins. That's enough for bots while not really getting in your way if it accidentally blocks the hotel you're in.

Combined with only allowing key based login, password is disabled.

[ Parent | on HN ]

Re:AS13335 doing SSH scanning by _moof on Saturday September 25, 2021 @03:08PM (#28655432)

I've recently added 2FA as well. Super easy to do.

[ Parent | on HN ]

Re:AS13335 doing SSH scanning by alias_neo on Saturday September 25, 2021 @06:21PM (#28656669)

I wrote a blog on how to do it a couple years back if anyone is interested in a "tutorial": https://2byt.es/post/totp/

It's for the Pi as that's the target audience but it should apply generally for OpenSSH.

There's also a sister post about improving your "first factor" for those still using passwords: https://2byt.es/post/totp2/

[ Parent | on HN ]