Re:Learn from your attackers – SSH HoneyPot
by megous on Tuesday September 19, 2017 @07:29PM
(#15289630)
It is part of it in this case. You've just eliminated most of non-targeted scanners. Your log is much more readable and what is left will probably be dedicated attackers.
This might help in forensic investigation afterwards. Less crap to wade through.
This might help in forensic investigation afterwards. Less crap to wade through.