arrow_upward

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
What are the consequences of changing port 22 on your VPS to a different number?
#1
I'm having a problem for the very first time since I've owned a VPS with my IP.  I have a feeling it is a bad IP as a huge variety of IPs and sources have been trying to access my VPS since 16 June - here's a small sample of what I've been getting from 16 June to date (I took a list of lastb for all of the bad login attempts since I took ownership of the IP).  What IPs are the ones that aren't straight IPs like have text in them?

Note that I've also taken a list of the successful login attempts, and they were only my IP.  Only the number of my actual logins.

Also note that this is not my post4vps VPS - it is one that I have with HostUS - and the first time that it has ever happened to me with an IP from them - I've had a good few.

Spoiler Expand
ftpuser  ssh:notty    139.255.57.42    Tue Jun 26 09:31 - 09:31  (00:00)
nas      ssh:notty    125.208.9.204    Tue Jun 26 09:27 - 09:27  (00:00)
nas      ssh:notty    125.208.9.204    Tue Jun 26 09:27 - 09:27  (00:00)
nas      ssh:notty    125.208.9.204    Tue Jun 26 09:27 - 09:27  (00:00)
nas      ssh:notty    125.208.9.204    Tue Jun 26 09:27 - 09:27  (00:00)
oliver   ssh:notty    189.254.33.157   Tue Jun 26 09:26 - 09:26  (00:00)
oliver   ssh:notty    189.254.33.157   Tue Jun 26 09:26 - 09:26  (00:00)
student0 ssh:notty    159.203.191.201  Tue Jun 26 09:25 - 09:25  (00:00)
student0 ssh:notty    159.203.191.201  Tue Jun 26 09:25 - 09:25  (00:00)
james    ssh:notty    121.201.66.39    Tue Jun 26 09:22 - 09:22  (00:00)
james    ssh:notty    121.201.66.39    Tue Jun 26 09:22 - 09:22  (00:00)
test     ssh:notty    118.189.20.130   Tue Jun 26 09:08 - 09:08  (00:00)
test     ssh:notty    118.189.20.130   Tue Jun 26 09:08 - 09:08  (00:00)
root     ssh:notty    218.158.81.87    Tue Jun 26 08:52 - 08:52  (00:00)
gl       ssh:notty    36.250.234.134   Tue Jun 26 08:46 - 08:46  (00:00)
gl       ssh:notty    36.250.234.134   Tue Jun 26 08:46 - 08:46  (00:00)
root     ssh:notty    cpe-74-128-119-9 Tue Jun 26 08:42 - 08:42  (00:00)
student  ssh:notty    122.154.134.38   Tue Jun 26 08:32 - 08:32  (00:00)
student  ssh:notty    122.154.134.38   Tue Jun 26 08:32 - 08:32  (00:00)
django   ssh:notty    115.254.63.51    Tue Jun 26 08:32 - 08:32  (00:00)
django   ssh:notty    115.254.63.51    Tue Jun 26 08:32 - 08:32  (00:00)
root     ssh:notty    200-148-91-38.ds Tue Jun 26 08:31 - 08:31  (00:00)
sshd     ssh:notty    4a.e0.089f.ip4.s Tue Jun 26 08:20 - 08:20  (00:00)
admin    ssh:notty    52.175.38.156    Tue Jun 26 08:20 - 08:20  (00:00)
root     ssh:notty    185.234.218.69   Tue Jun 26 08:07 - 08:07  (00:00)
root     ssh:notty    185.234.218.69   Tue Jun 26 08:07 - 08:07  (00:00)
root     ssh:notty    185.234.218.69   Tue Jun 26 08:07 - 08:07  (00:00)
dhsites  ssh:notty    host180-177-stat Tue Jun 26 07:49 - 07:49  (00:00)
dhsites  ssh:notty    host180-177-stat Tue Jun 26 07:49 - 07:49  (00:00)
dhsites  ssh:notty    host180-177-stat Tue Jun 26 07:49 - 07:49  (00:00)
dhsites  ssh:notty    host180-177-stat Tue Jun 26 07:49 - 07:49  (00:00)
root     ssh:notty    222.29.97.98     Tue Jun 26 07:40 - 07:40  (00:00)
ohs-me   ssh:notty    179.33.29.155    Tue Jun 26 07:28 - 07:28  (00:00)
ohs-me   ssh:notty    179.33.29.155    Tue Jun 26 07:28 - 07:28  (00:00)
ohs-me   ssh:notty    179.33.29.155    Tue Jun 26 07:28 - 07:28  (00:00)
ohs-me   ssh:notty    179.33.29.155    Tue Jun 26 07:28 - 07:28  (00:00)
user     ssh:notty    128.ip-217-182-6 Tue Jun 26 07:22 - 07:22  (00:00)
user     ssh:notty    128.ip-217-182-6 Tue Jun 26 07:22 - 07:22  (00:00)
sql      ssh:notty    213.55.214.171   Tue Jun 26 07:19 - 07:19  (00:00)
sql      ssh:notty    213.55.214.171   Tue Jun 26 07:19 - 07:19  (00:00)
root     ssh:notty    078088077063.pol Tue Jun 26 07:13 - 07:13  (00:00)
system   ssh:notty    c3.dhps.tp.edu.t Tue Jun 26 06:49 - 06:49  (00:00)
system   ssh:notty    c3.dhps.tp.edu.t Tue Jun 26 06:49 - 06:49  (00:00)
proxy    ssh:notty    198.23.150.106   Tue Jun 26 06:48 - 06:48  (00:00)
proxy    ssh:notty    198.23.150.106   Tue Jun 26 06:48 - 06:48  (00:00)
proxy    ssh:notty    198.23.150.106   Tue Jun 26 06:48 - 06:48  (00:00)
proxy    ssh:notty    198.23.150.106   Tue Jun 26 06:48 - 06:48  (00:00)
jonathan ssh:notty    115.111.156.194  Tue Jun 26 06:46 - 06:46  (00:00)
jonathan ssh:notty    115.111.156.194  Tue Jun 26 06:45 - 06:45  (00:00)

If I change port 22 to a different number will that stop these attempts?  And what will the consequences be for my WordPress applications if I change the port number?
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  



person_pin_circle Users browsing this thread: 4 Guest(s)
Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting