this post was submitted on 06 Oct 2023
13 points (88.2% liked)

Hacker News

4123 readers
3 users here now

This community serves to share top posts on Hacker News with the wider fediverse.

Rules0. Keep it legal

  1. Keep it civil and SFW
  2. Keep it safe for members of marginalised groups

founded 1 year ago
MODERATORS
 

There is a discussion on Hacker News, but feel free to comment here as well.

top 6 comments
sorted by: hot top controversial new old
[–] bitsplease@lemmy.ml 4 points 11 months ago (1 children)

This or similar software is basically required is you have an SSH server accessible over the internet

Don't make the mistake I did and assume that your server is too small or inconsequential to get hacked - a hacking attempt is a matter of "if" not when, but turning off password Auth and adding fail2ban will get you locked up tight

[–] PFShady@lemmy.world 1 points 11 months ago

In the early days of my home server I remember looking at the logs and just watching them scroll with failed attempts. It was just a small box for messing about on with a dynamic IP. Older and wiser now.

[–] gerbilOFdoom@beehaw.org 1 points 11 months ago (1 children)

Old software that can actually be superceded by some newer tech if someone feels like doing so.

Easy to use, lots of documentation. 10/10

[–] 4am@lemm.ee 2 points 11 months ago

Suricata + fail2ban has served me well

[–] lemmyng@beehaw.org 1 points 11 months ago (1 children)

These days I would recommend CrowdSec over fail2ban.

[–] ZiemekZ@lemm.ee 1 points 11 months ago

Does CrowdSec have abuseipdb.com integration (and endorsement)?