Hacker News new | ask | show | jobs
by kristofferR 4856 days ago
Sure, it'll not stop dedicated manual intrusion attempts, but it will actually prevent a ton of automated bots from even just trying to connect with common passwords through SSH.
4 comments

Which is irrelevant if you have any one of: strong passwords, no passwords, fail2ban
Which is relevant if you're one to actually look at your login attempt logs.
2222 is a dumb choice as an alternative port, it's both obvious and quite commonly used. I'm using a port on 4XXXX-range that's normally not used for anything and therefore not scanned by the bots unless all the 65536 ports are. The automated login attempts disappeared almost immediately, except for a few that were quickly blocked.

Now the logs are clean from automated login bots, the only thing left are real dedicated hacking attempts that is worth pursuing further.

It's what I do, you can't break in a door that doesn't exist, only those you know exist.
>Sure, it'll not stop dedicated manual intrusion attempts, but it will actually prevent a ton of automated bots

Doesn't take long to port scan a server.