Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you don't run ssh on port 22, it's been proved that it receives a lot less outside login attempts and stops the logs filling up with login failures apart from anything else.


Logs filling up with login failures is hardly a decent reason.


Two reasons: 1. Logs filling up with login failures from drive-bys masks legitimate/focused hack attempts. 2. If there's a security vulnerability found for sshd, non-standard port choice reduces the risk of drive-by scanners.

Non-standard ports don't stop dedicated attacks, but they do reduce noise that can obfuscate a dedicated attack and can reduce your exposure to uncommitted attackers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: