Re: [tor-relays] Attacker IP database

Quoth Bryan Carey:

Thanks everyone for your input! I already had root access disabled via sshd config. I will look into fail2ban as it sounds like it remedies the problem I'm having.

Changing the port sshd runs on has a suprisingly large impact on reducing the number of these attacks, too. Of course it's only security by obscurity, but for the zombie attacks you're describing it's quite effective.