babadaba

4 ms·

1. 1.▲
   by babadaba 6y ago

   > Scripts are not magic, they must be doing something Not necessarily. Sometimes they just record potential targets for later manual probing. If the script doesn’t find what it’s looking for (in this example the default ssh port), your s
2. 2.▲
   by babadaba 6y ago

   Or you could say, security by obscurity is one of the layers of their defence in depth strategy. Edit: I believe you are implying that they used “security by obscurity” incorrecty, which I don’t believe they did. If I read that wrong, my ba
3. 3.▲
   by babadaba 6y ago

   > What are you defending against You’re defending against people who wrote scripts that only check the default port. Based on numbers that some others posted, that is actually quite a sizeable number, as they reported numbers of attempte
4. 4.▲
   by babadaba 6y ago

   Do you see how the complexity of the attack increased though? Now the attacker has to buy multiple hosts to stage their attack from. Like anything in life, when things get hard, a percentage of people give up.