Have malicious SSH attacks increased since COVID-19 began? Yes.

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Sometime in the middle of February, I started noticing a marked increase in failed SSH logins on my two servers. Using the program fail2ban , I have long blocked logins by IP addresses that attempt to use root , www-data , or similar generic logins via SSH. IPs are blocked for a full year. Root logins and password authentication are both disabled in the SSHD config. In other words: I’m the…

Read on anelki.net ↗