Other hosts seem to be targeting my server with repeated login attempts and dictionary attacks, what's going on?

There are many compromised hosts on the Internet these days, seeking out other hosts to compromise. Their process is mostly automated, but you can try to protect yourself with these tips.

* Don't use simple passwords like 'abc123,’ even temporarily.

* Disable password authentication and use ssh keys for authentication instead.

* Only allow logins from certain hosts.

* Install an application like DenyHosts or Fail2Ban to dynamically block hosts as they try, and fail, to authenticate.

* Disable any Internet-facing services that are not necessary.

* Try to use only encrypted services when possible. For example, use ssh instead of telnet, and scp/sftp instead of ftp.