[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: SSH and Telnet ports, tip: change the sshd port

To: or-talk@xxxxxxxxxxxxx
Subject: Re: SSH and Telnet ports, tip: change the sshd port
From: xiando <xiando@xxxxxxxxxx>
Date: Sun, 14 Dec 2008 22:08:46 +0100
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Sun, 14 Dec 2008 16:09:06 -0500
In-reply-to: <52836a540812141241h5a36a134u47ee671a216a4ce@xxxxxxxxxxxxxx>
References: <f63c4b2d0812141015q39c22941w856af2853230e165@xxxxxxxxxxxxxx> <49456326.30806@xxxxxx> <52836a540812141241h5a36a134u47ee671a216a4ce@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: KMail/1.10.92 (Linux/2.6.25-gentoo-r4; KDE/4.1.82; i686; ; )

> Thanks for the information. I run denyhosts, and receive ridiculous
> numbers of these connections to my servers as well. I ran a quick
> script to grab what denyhosts had blocked, and determined how many of
> those connections were from Tor exit nodes. Quite a large number!

Off topic, I had a whole lot of login attempts at my servers. I changed the
SSH port to a non-standard port and I have not seen a single login attempt
since then.

Attackers targeting me could easily portscan, but those who simply scan
numerous IPs for someting at 22 fail.

Attachment: signature.asc
Description: This is a digitally signed message part.

References:
- SSH and Telnet ports
  - From: Mitar
- Re: SSH and Telnet ports
  - From: Dominik Schaefer
- Re: SSH and Telnet ports
  - From: Kasimir Gabert

Prev by Author: Incoming exit node traffic detection
Next by Author: Re: A better routing selection mechanism for Tor?
Previous by thread: Re: SSH and Telnet ports
Next by thread: Re: SSH and Telnet ports
Index(es):
- Author
- Thread