Re:Endlessh: An SSH Tarpit
by seqizz on Wednesday September 16, 2020 @08:51AM
(#24492151)
I'd rather have a trusted common list of known abusers' IPs. But I think that's harder to maintain.
[ Parent
| on HN ]
That's called a DNSBL, and there are many of them, mostly for email spam though.
Re:Endlessh: An SSH Tarpit
by geocrasher on Wednesday September 16, 2020 @01:09PM
(#24494720)
What I find infuriating is when an admin gets the bright idea to block all connections from IP's that are in mail dnsbl's. It's a great way to alienate people from using your services. I can't remember which company was doing it, but a customers API calls to a vendor failed because the vendor blocked the IP, which was blacklisted somewhere.
Here's the kicker: The server wasn't even used to send mail and hadn't been for a long time. So we had to apply for a delisting from a mail blacklist for a server that didn't send mail so that a customer could use an API.
The admin thought they were being clever, but instead they were just being difficult.
There's https://iplists.firehol.org/