Do I get bruteforced?

[tim.h]

Hey guys,
I'm using PROXMOX and looked at the syslog by chance and saw that some IP addresses want to connect to my server. Is this normal or does someone want to find out my password? Here is the full Syslog: https://pastebin.com/6vCkp0mg

 

[sg90]

Is perfectly normal, and I would suggest its just part of a bot scanning IP ranges instead of targeting your specifically.

You just need to make sure you have a strong password set and/or change to using SSH Cert based login and disable password auth all together.

 

[dietmar]

People use firewalls to prevent connections from arbitrary IP addresses ...

 

[Glowsome]

i used to limit ssh connections with geolocation stuff .. but as that worked over tcpWrappers .. and ssh dropped that support its no longer viable .. but just for reference : https://www.axllent.org/docs/view/ssh-geoip/

Additionally as @dietmar mentioned ... it is unwise to 'just expose' ssh to the internet without thinking thru why - so a firewall would be the best way to solve this.

 

[Andrey.Lysikov]

Hi! Just install fail2ban. He bans on ip all who entered the wrong password several times.