Подскажите, используют ли сейчас denyhost для защиты от брутфорса ssh, или актуально что-то другое? Посмотрел - он обновлялся последний раз в 2016. Блокировать надо что-то типа такого:
Nov 29 08:23:12 host1 sshd[31833]: Failed password for root from 43.231.184.203 port 53970 ssh2
Nov 29 08:23:12 host1 sshd[31833]: error: Received disconnect from 43.231.184.203: 3: com.jcraft.jsch.JSchException: Auth fail [preauth]
Nov 29 08:23:13 host1 sshd[31835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.231.184.203 user=root
Nov 29 08:23:15 host1 sshd[31835]: Failed password for root from 43.231.184.203 port 54264 ssh2
Nov 29 08:23:15 host1 sshd[31835]: error: Received disconnect from 43.231.184.203: 3: com.jcraft.jsch.JSchException: Auth fail [preauth]
Nov 29 08:23:16 host1 sshd[31837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.231.184.203 user=root
Nov 29 08:23:19 host1 sshd[31837]: Failed password for root from 43.231.184.203 port 54650 ssh2
Nov 29 08:23:19 host1 sshd[31837]: error: Received disconnect from 43.231.184.203: 3: com.jcraft.jsch.JSchException: Auth fail [preauth]
Nov 29 08:23:20 host1 sshd[31839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.231.184.203 user=root
