[Tfug] Stopping repeated login attempts

[Bexley Hall]

Hi Andy,

> >> OTOH, you probably don't know many burglars who can
> >> kick 1000 doors per second!  ;-)
> 
> I would have thought that the "burglars" would have more
> success overall if they scan 1000 servers per second rather
> than spending (in the worst case) 65 seconds scanning each
> server that doesn't have SSH at the default port.
> 
> I.e. they would take advantage of the fact that most
> servers probably keep SSH at the default port and not waste
> time on the few that don't.

Yes, but they already *knew* that server had ssh running.
So, looking at other ports has a high probability of
turning up a "moved" sshd!