3 ms·
until one of the millions of other compromised IPs begins hammering your machine minutes later..
by throwaway2048 13y ago
until one of the millions of other compromised IPs begins hammering your machine minutes later..
- Moru 13y agoThat's the whole point. The ban-hammer in this case is automatic and will ban that one too after five attempts or whatever.
- throwaway2048 13y agoit still doesn't prevent your logs getting filled up with crap is my point.
- Piskvorrr 13y agoPreventing logs from filling up is quite a cosmetic issue. Making the box hard to crack is certainly more relevant. Note that I'm not advocating against a port change; just saying that it's the very last of available options, as it's essentialy security-by-obscurity, and thus only gives you a feeling of higher security (due to less spam in the logs).
- danielweber 13y agoMaking security logs usable can (note the word) be a very important part of a security setup. Lots of people don't have the bandwidth to pay attention to noisy log files to look for anomalies.
- moe 13y agoYou're missing the point. One attempt is enough when there's a pre-auth exploit.