SSH Rising most of the times

My ssh logs shows that ,I have been using it more times but I don’t use it about a week. I investigated and found out alot of attacks on my ssh ports ,hestia being so good refusing alot of attacks to connect to it, but it doesn’t end there there is still more coming.

I wanted to no if its adviserable to change my ssh port from 22 to any other ports. Or if there is advance security features I must do to make sure my server doesn’t get compromised. Thank you.

If you want to reduce noise in your logs, change the SSH port to a different one. It won’t make your setup more secure, but you will definitely see far fewer bots in your logs.

Keep your OS updated and do not allow SSH connections using passwords (use private keys only). Disable root access or at least require it to use a private key. You can also use something like port knocking to enable the SSH port only when you trigger a specific port sequence, or use another tool like ruroco to achieve the same (I use this one), etc.

1 Like