13 ms·
Does it matter, though? You can easily scan out the correct SSH port.
by schlonger0009 2y ago
Does it matter, though? You can easily scan out the correct SSH port.
- nilsherzig 2y agoScanning all 65k ports takes time. Those aren't targeted attacks, just bots connecting to every 22 ports they can find
- nilsherzig 2y agoScanning all 65k ports takes time. Those aren't targeted attacks, just bots connecting to every 22 ports they can find
- dugite-code 2y agoDepends on how well programed the bot is I guess. Personaly I use the encrypted packet port knocking package fwknop on my home server to hide the ssh port until I need it.
- scsh 2y agoThe point of this isn't to hide your actual SSH service, but to tie up resources for those who are somewhat blindly scanning/connecting to any open SSH port.
- bayindirh 2y agoYou can setup a VPN (or head/tailscale) and confine your "real" sshd there, and leave one of these tarpits in the open for fun and profit.