Re:What You Get After Running an SSH Honeypot for 30 Days
by dizhn on Sunday June 16, 2024 @06:37AM
(#40696043)
For most of my VMs there's no ssh running. I use wireguard to connect to a private IP. I haven't done this on the bare metal yet but I might. Though barring exploits like we had recently nobody is getting into a server with either strong passwords or certificates. Fail2ban in my eyes is a log cleaner. It's not useful for much else.
[ Parent
| on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days
by cranberryturkey on Sunday June 16, 2024 @08:40AM
(#40696620)
it bans the bad ips, isn't that worth running?
Re:What You Get After Running an SSH Honeypot for 30 Days
by thfuran on Sunday June 16, 2024 @01:41PM
(#40698761)
But what does that actually accomplish?
Re:What You Get After Running an SSH Honeypot for 30 Days
by cranberryturkey on Monday June 17, 2024 @09:28PM
(#40713170)
stops the attack from happening from those ips?