Hi all,
I've just checked and the following servers all allow login via password
(instead of SSH key only). Is anyone actually using this?
I'd recommend to disable all password access and SSH key only or
additionally install sshguard [1] to block brute force attacks.
-
libremesh.org
-
downloads.libremesh.org
-
snapshots.libremesh.org
- more?
Best, Paul
[1]
https://packages.debian.org/jessie/sshguard