[PLUG-TALK] Increased System Probes/Cracking Attempts

Paul Mullen pm at nellump.net
Wed Apr 28 17:59:23 UTC 2010


On Wed, Apr 28, 2010 at 09:57:54AM -0700, Rich Shepard wrote:
> Sound advice. I'll go read what is involved at both ends and make
> the changes.

On the client side, it's "ssh -p 31415" or "scp -P 31415" (pretending,
for this example, that your sshd listens on port 31415). On the server
side, you can either modify the "Port 22" entry in sshd_config, or
alter the port that your router forwards (if you have NAT and
port-forwarding on your home LAN).

> The sshd attempts all fail, but usually are few in number. It is the
> port scanning attempts that greatly increased yesterday which is the
> most noticeable change.

I was getting thousands of sshd dictionary attacks per day until I
moved the port it listens on. I've never bothered to monitor port
scans. Perhaps I should.

-- 
Paul



More information about the PLUG-talk mailing list