Concerned About Your Business Cyber Security?

(877) 321--7374

A Comparison Study of SSH Port Activity – TCP 22 & 2222, (Sat, Mar 9th)

I added a while ago to my honeypot TCP 2222 usually associated with SSH traffic to compare the amount of scans targeting port 22 and 2222 over a period of 7 days. What I have noticed, only about 50% more of the traffic is going to TCP 22 the default SSH service. The activity reported for the past month to DShield has been pretty consistent for TCP 2222[1]. I used the latest version of rockNSM released a few weeks ago with the new added dashboard to track the activity.

Ready For ASuperheroI.T. Solution?

Real Time Web Analytics