@abcdw I use port 22 with password login disabled and...

@abcdw I use port 22 with password login disabled and fail2ban, and that keeps the amount of knocks down pretty low. I do keep thinking about moving it to some odd high port though

Like 22 October at 7:15 | Wall-to-wall | Open on functional.cafe

2 comments

Andrew Tropin

@tfb on my personal VPSes I use non-standard port and have it written in my ssh config, so I just type ssh hostname and it works, but I didn't thought about best ssh practices for years. Curious, what is a good way to deal with it nowadays.

22 October at 7:22 | Open on fosstodon.org

dexternemrod

@abcdw

@tfb

Same here.
In addition I use fail2ban/only allow login via ssh-key and disabled root login.
There is nearly no traffic on this port.
Checking the failed login attempts on port 22 (needs to be the ssh-port for this afaik) is quite interesting and gives a nice overview for used usernames, which then can be avoided.

22 October at 11:13 | Open on troet.cafe

Go Up