Tutorial 2: Stateful Firewall and Bruteforce SSH Attempts

[nyameko]

Provided that you DO NOT enable password authentication to your head node's SSH server, there is little threat from Brute-force SSH attacks, but dropping all these queries nonetheless utilizes processing power from your head node.

You are advised to implement a stateful firewall and explore further methods to mitigate threats against your public facing interfaces.

Here is a sample of some of the incessant attempts:

[Talhahpatelia]

Wits-A

Here is an image of the incessant attempts:

[CraftierLamb599]

Wits-1

[Kohzmik]

CUT_Team

[prince-taker]

Ctrl Alt Elite

[Cyphers-UFH]

Cyphers - UFH

[JedK721]

Wits-i

Incessant attempts:

[MishkaSingh1]

EEElite (UCT)

[hoperiley0806]

Parallel Pioneers
"sudo journalctl | grep sshd" screenshot

[Dc-Spears]

CPUT! (DC Spears)

journalctl of sshd before "bruteforce"

journalctl of sshd after "bruteforce"

[Rosemary2301]

Algorithm Avengers

[siyabonga-mashilwane]

ThunderBytes

[WandileNativeson]

Khulisa IP-A

[TshiamoChokoe]

[15kay]

HYPERNET

sudo journalctl | grep sshd

[mbhonichau]

WSU ELITE

[ADELAIDEMOGALE]

Khulisa Data

sudo journalctl | grep sshd

[ndumezulu-ngwenya]

UNISA-SCT'24

sudo journalctl | grep sshd

[lisabeeaan]

HPC Wizards

[Cybershield-24CUT]

Cybershield

[Future-Innovators-SMU]

sudo journalctl | grep sshd

[15kay]

HYPERNET