[BUGS] Constant SSH login spam

Bernie Maier bugs at lists.blurk.net
Mon Feb 4 09:42:27 EST 2008


I'm another one who agrees with this:

Peter Jeremy:

> If it's annoying you, I suggest you move your sshd to a different
> port and either block port 22 [...]

FWIW I've been doing this for a few years now, so I don't know if attack
frequency has increased recently.  All I know is that I was getting so
many port 22 login attempts that I realised I'd never see any real threat
in all the noise, so I simply switched ports.  Then, when eventually work
tightened up its own policies and stated they would only allow SSH outbound
on port 22, I just set up a firewall rule to allow only work's IP address
to connect via port 22.

Cheers,

    Bernie



More information about the BUGS mailing list