DE EN IT

~/ports / 22

Port 22: securing SSH and SFTP

Port 22 is the standard port for SSH remote access, SFTP and scp.

Port
22
Protocol
TCP
Service
SSH / SFTP
Exposure
Public: yes, key-only, ideally IP-restricted
daniele@mikweb: ~/ports — less 22.md

Port 22 is where sshd listens for shell access, SFTP and scp. Any public port 22 gets hit by password-guessing bots within minutes.

Hardening: PasswordAuthentication no and PermitRootLogin prohibit-password in /etc/ssh/sshd_config, keys only (ed25519), Fail2ban, and if possible access only from admin IPs or via VPN. A different port reduces log noise but is not a security control.

Common errors: Permission denied (publickey) caused by wrong permissions on ~/.ssh (700) or authorized_keys (600), or a host key warning after a reinstall.

Check

ssh-keyscan -p 22 server.example.com
daniele@mikweb: ~/ports — ls

Ports

20-21/TCPFTP51820/UDPWireGuard3389/TCP/UDPRDP

← All ports