Re: [cobalt-users] Port 22 SSH common attacks

["MikeM" <MyRaQ@xxxxxxxxx>]

On 11/9/2001 at 2:57 PM flash22@xxxxxxx wrote:

|On Fri, 9 Nov 2001, Zarrir Junior wrote:
|
|>      I´ve noticed that the scans to port 22 have become very common to my
|> Raq machines. Does anybody know any new specific bug in Cobalt software?
|
|No, but there appears to be a new tool available to the kiddies that has
|been seen around lately...(for the old ssh1 hole). eg scanning for broken
|ssh machines has gotten easier, expect more silliness...
|
=============


At the excellent suggestion of someone on this list, I have moved my sshd port away from port 22.  A quick, easy change to the sshd config file is all that is needed on the server, and a similar change should obviously be made on the clients.

So long as I was in the sshd config file, I also turned off support for the ssh1 protocol, leaving only ssh2 enabled.


(I also moved the ftpd port away from port 21 ... no more ftp scans)