2 ms·
Wait, who's using SSH pass auth? Folks, private keys. Change your SSH port and use an SSH tarpit on port 22.
by rmbyrro 3y ago
Wait, who's using SSH pass auth?
Folks, private keys. Change your SSH port and use an SSH tarpit on port 22.
- FergusArgyll 3y agoHow necessary is it to change ssh ports? You can't really spray/brute force a private key
- rmbyrro 3y agoIt's not "necessary", but, when combined with a tarpit on port 22: 1. You can monitor if your private key is compromised and automatically rotate it. 2. It's fun to mess around with hackers and script kidies.
- twosdai 3y agoThe tarpit on 22 is amazing. I love looking at all the access logs every fee months and seeing connection attempts that last minutes.