Block SSH from public to Internet router

[RajeshThangadurai5469]

Hello,

I am new to networking. In Internet router I see multiple failed logins from public IP address . Looks like due to misconfiguration , port 22 is open to public and bad guys are trying to brute force.

Can you please help me , where exactly the configuration would have gone wrong and how to fix it ?

[marce1000]

 Here's an example article with guidelines ; for your particular issue have a look a the fire walling and acl section :

   https://www.techrepublic.com/blog/data-center/fundamentals-five-ways-to-secure-your-cisco-routers-and-switches/

 M.

[balaji.bandi]

Not sure what is the device here - if the attempt coming from Public IP address - why not ssh listen only on the internal interface?

ip ssh source-interface XXX  

other methods you can build ACL.