News for hackers. Stuff that matters.

A comment on What You Get After Running an SSH Honeypot for 30 Days. Parent comment

Re:What You Get After Running an SSH Honeypot for 30 Days by DEADMINCE on Sunday June 16, 2024 @11:04AM (#40697599)
That's very computationally inefficient.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by aforwardslash on Sunday June 16, 2024 @12:11PM (#40698088)
You can trivially maintain a list of the size of the whole ipv4 space by using bitmaps
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by TacticalCoder on Sunday June 16, 2024 @04:26PM (#40699830)
> That's very computationally inefficient.

It's O(1) with iptables/nftables ipsets. Moreover as I blocklist entire CIDR blocks, there aren't that many entries in those ipsets.

[ Parent | on HN ]