Hacker News Reader

oh yeah, sorry, I didn't mean to make it out like I was complaining. I log all blocked traffic, so I get data related to ports other than just SSH. I was more lamenting that people even want to attack my VPS, as there's really nothing interesting about it.

View on HN

It's not people, though. It's bots! While changing the ssh port adds a comically small amount of security (if any), it isolates you from 99.99% of automated attacks and keeps those logs clean, so I'd recommend it for everyone.

Just remember that the port argument to `scp` is -P and not -p like it is for `ssh`. :p

Yeah, I whitelist IPs, and just drop all other packets, so I'm not really worried, but thanks for the advice, it's always good to get other peoples opinions on best practices.

I think you can just use ssh/config to store ports even for scp; it's much nicer than remembering that stuff.

Reply on news.ycombinator.com