you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 8 months ago (7 children)

Am I the only one using a random 5 digit port for ssh? Why using the default port 22? It's just saving time for an attacker.

  • source
  • hideshow 7 child comments
  • [–] 9 points 8 months ago

    To me, the nonstandard port is mostly nice for reducing log spam from scripts. The risk is that using a nonstandard port lulls one into a false sense of security and overlook good sshd practices. Good sshd practices will prevent the script-kiddies just as well as the non-standard port, while a non-standard port will not challenge a targeted attack. And, if you interact with multiple servers, it can be inconvenient to remember a different port for each one.

  • source
  • parent
  • [–] 5 points 8 months ago

    I use nonstandard ports for just about everything such as Docker containers, including ssh. However, modern bots are quite capable of scanning your server for vulnerabilities, CVE, zero day, and SSH. A non standard SSH port does reduce noise a bit but isn't a reliable defense against scanners.

  • source
  • parent
  • [–] 2 points 8 months ago (4 children)

    The whole port range can be scanned in under a second. A real attack does not care if your ssh port is 22 or 69420. Changing Port is just snake oil.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 8 months ago (2 children)

    It can be scanned, but definitely not under a second.

  • source
  • parent
  • hideshow 2 child comments