News for hackers. Stuff that matters.

A comment on AS13335 doing SSH scanning. Parent comment

Re:AS13335 doing SSH scanning by themulticaster on Saturday September 25, 2021 @10:02AM (#28653301)
Does that mean that you automatically block IPs that try to login on port 22 (since they are obviously malicious/port scannners)? If yes, is there any specialized daemon for that or are you using firewall rules? Or are you running a SSH honeypot on port 22?
[ Parent | on HN ]
Re:AS13335 doing SSH scanning by c0wb0yc0d3r on Saturday September 25, 2021 @10:45AM (#28653584)
The post is referring to this: https://github.com/skeeto/endlessh

I'm guessing that the person you replied to is referring to the same.

[ Parent | on HN ]
Re:AS13335 doing SSH scanning by ben_bai on Saturday September 25, 2021 @10:42AM (#28653558)
A tarpit is a technique to waste your opponents time and network sockets. Usually by accepting the connection but only sending or receiving data at like 1byte/s.
[ Parent | on HN ]