News for hackers. Stuff that matters.

A comment on What You Get After Running an SSH Honeypot for 30 Days. Parent comment

Re:What You Get After Running an SSH Honeypot for 30 Days by shaky-carrousel on Sunday June 16, 2024 @07:13AM (#40696199)
Good idea. What I do is, I disallowed password login in my ssh server, and I permanently ban whichever address that tries to log in using a password.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by BLKNSLVR on Sunday June 16, 2024 @07:29AM (#40696271)
I use a bastion host on a VPS as the only source IP address allowed to ssh into my systems, so any attempts to connect to ssh (from any IP address other than the bastion) are both blocked and logged into "the list" to be blocked from connecting to any other service ports.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by PokestarFan on Monday June 17, 2024 @12:35PM (#40707632)
I did this but added an "escape hatch" that allowed password logins from the local network only.
[ Parent | on HN ]