Leaving services' ports at their default values: convenience VS security
nmaggioni.xyz
nmaggioni.xyz
Use fail2ban or similar to ip-block brute force attempts, and minimise public services like MySQL, etc by requiring a vpn/ssh tunnel to connect.
How is this idea of using random ports for "security" still a thing?
Do the same people suggest md5 for passwords too?
It's a well established pattern for brute force tools to not just try the default port, but perform a port scan to detect listening ports, and then try those.
Putting your services on other ports just makes things inconvenient for the user, nothing more.