Looking through the
sshd logs, there is a remote machine which appears to be attacking my server. here is an example of an entry. It is always the same IP.
May 8 17:57:32 [removed] sshd: Unable to negotiate with 22.214.171.124 port 42302: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
I have installed
fail2ban, but it doesn't seem like it is blocking this IP.
How can I resolve this problem?