News for hackers. Stuff that matters.

A comment on What You Get After Running an SSH Honeypot for 30 Days. Parent comment

Re:What You Get After Running an SSH Honeypot for 30 Days by appstorelottery on Sunday June 16, 2024 @05:29AM (#40695801)
Would be cool to have a "don't scan me bro" list of IP's that engage in this that we could share - is there such a thing?
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by BLKNSLVR on Sunday June 16, 2024 @05:51AM (#40695881)
The problem is that becomes a concentrator of IPs behind which privacy conscious individuals exist, which probably has higher value to "whoever's buying". It's a conundrum.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by yesbabyyes on Sunday June 16, 2024 @06:47AM (#40696091)
It sounds like what GP is suggesting is to collect ips of all the scanners, and share the list of ips among ourselves, so we can collectively route their traffic to /dev/null.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by BLKNSLVR on Sunday June 16, 2024 @07:02AM (#40696146)
aaaaah, that makes sense. See the links in my original post.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by kjkjadksj on Sunday June 16, 2024 @12:26PM (#40698218)
Why not also sell the scans of scanners to the scanners customers and make a little pocket change?
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by dataflow on Sunday June 16, 2024 @06:06AM (#40695931)
You're being sarcastic, right? We did this for telephone numbers and saw how it turned out...
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by zbentley on Sunday June 16, 2024 @08:42AM (#40696633)
There's a comment downthread discussing something similar; I haven't tried it though: https://news.ycombinator.com/item?id=40695179
[ Parent | on HN ]