3 ms·
Needing distributed port scanner adds a huge barrier to entry over that needed for a simple ssh brute force script. Not to mention that once you find the port y
by djrogers 10y ago
Needing distributed port scanner adds a huge barrier to entry over that needed for a simple ssh brute force script. Not to mention that once you find the port you have at most 30s to brute force it before it moves again...
- falcolas 10y agoNot so huge. nc -z <host ip> 0-65535 This runs pretty quickly, and if you're co-located with your attacker (i.e. aws), you're not going to be in great shape. So ultimately, this offers about the same protection against a dedicated attacker that just hosting it on a non-standard port does, with the disadvantage of any clock drift making it much harder to access your own machine.