Where to Report an Attack?

1 pointairocker3 comments

I run an open ssh server on the web. WE are seeing a lot of attacks trying to guess the password on ssh logs. Is this normal? We will switch it off but is there a place to complain?

View on HN

You may want to consider disabling password-based SSH logins altogether and sticking with keys instead.

Also, you can reduce a lot of noise by changing the port number:

Moving your SSH port isn’t security by obscurity https://news.ycombinator.com/item?id=24542104

Why change default ssh port? https://serverfault.com/questions/189282/why-change-default-...

This is very normal, so normal search is your friend for suggestions on how to mitigate.

To be clear it is normal however you should take steps to protect against it.

Reply on news.ycombinator.com