Why Putting SSH On Another Port is a Good Idea

Re:Why Putting SSH On Another Port is a Good Idea by stephen_g on Saturday October 26, 2013 @12:33AM (#6616353)

Well, apparently with Zmap [1] you can do internet-wide scans in less than an hour from a single host, so I can't imagine they'd have that much trouble finding any open SSH ports on a smaller IP range.

So just changing the SSH port will do little, but enabling port knocking would help it stay hidden.

1. https://zmap.io/zmap-talk-sec13.pdf

[ Parent | on HN ]

Re:Why Putting SSH On Another Port is a Good Idea by socillion on Saturday October 26, 2013 @12:55AM (#6616401)

"Less than an hour" is with gigabit internet, which is rare for an attacker to have.

[ Parent | on HN ]

Re:Why Putting SSH On Another Port is a Good Idea by Zr40 on Saturday October 26, 2013 @01:34AM (#6616486)

With a 100 Mbit/sec connection, that would become "Less than 10 hours". That's still quite fast.

[ Parent | on HN ]