I must admit I didn't now what ssh is until just a while ago when I got annoyed from those authentication logs from sshd.
I searched a bit and was surprised that these authentication attempts were actually trying to access my shell remotely probably to do something bad with my personal data.
The current system I'm playing with is a fresh FreeBSD install which had sshd on by default during installation. I didn't know what it was then so I just blindly followed the defaults. I checked with ps
and got scared that there are 2 unknown connections accepted by sshd. My root password is only 2 letters, so it seems some of those bruteforce attacks has succeeded. I'm trying to do my best in order not to let something like this happen again, and I wonder if turning off sshd by default is okay if I'm just using this system as a personal desktop.
root
password. Disable password login forroot
via ssh (seesshd_config(5)
). Only allow ssh from local or trusted networks via the firewall for e.g. git push/pull via ssh to/from virts.