3 ms·
Related or not: I have been running ssh on several internal but internet facing systems on non-standard port numbers for years there have been virtually no log
by usr1106 6y ago
Related or not: I have been running ssh on several internal but internet facing systems on non-standard port numbers for years there have been virtually no log in attempts on these ports. In the last 6-9 months activity has increased a lot. Most addresses make 5 connection attempts and then go away. Not really a case for fail2ban. I could ban them after 3 so save 40%...
No country particlarly stands out. Digitalocean and Korea maybe I bit more than I would have expected.
- pdimitar 6y agoWhen I set up my Pihole, I mistakenly left UDP port 53 open to the world and passing through to the Pihole. It got found and used within 4-5 days. Noticed the Pihole stats for non-router clients (I made it to redirect all local outbound DNS traffic to itself) and fixed it but it was curious regardless. Thought it was going to be found and abused much sooner. Especially with such a prominent and well-known port as DNS.
- axegon_ 6y agoSimilar story here, except I have 551 attempts in the last 72 hours alone. Mostly Singapore and China.