While I was doing some regular maintaince on my minecraft server, I stumbled on a massive log of failed connections via ssh. I closed the port while I did some digging only to find that for the past month, my server was getting blasted 24⁄7 by a botnet. What follows in an analyis of the logs I collected and the lessons I learned about securing a homelab.
Attack Post Mortem Thankfully, due to my already security focused outlook, all my homelabs vms where in a secure state.