Brute force protection

@memes

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 years ago (3 children)

I remember in college editing OpenSSH source code to instead of return wrong password to a root shell prompt just to stop brute force attacks

  • source
  • hideshow 6 child comments
  • [–] [S] 1 point 2 years ago (1 child)

    @Pacmanlives
    Couldn't you just disable root login in the sshd config?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 years ago (1 child)

    Oh all of my configs are deny root ssh login or without-password. I noticed a significant decrease in scans when returning a root prompt when I did that. This was also in the mid 2000s so who knows how things would be in this day in age for a reduction in scans

  • source
  • parent
  • hideshow 2 child comments