#endlessh — Public Fediverse posts

Yesterday I discovered endlessh (https://github.com/skeeto/endlessh), which is a tarpit for those SSH login guessing bots. I made a little Python script that filters its logs and gives me some stats.

It's a lot of fun to see them get trapped, and I'm also having fun looking up from which countries they are coming.

#ssh #linux #endlessh

A mention elsewhere of the insufferable ssh password guessers has me reprise my "The Hail Mary Cloud and the Lessons Learned" https://nxdomain.no/~peter/hailmary_lessons_learned.html piece, with a note added at the end about endlessh as a possible refinement (yes, I use it) #ssh #passwords #passwordguessing #passwordgroping #endlessh #openbsd #freebsd #pf #packetfilter #security #cybercrime

A mention elsewhere of the insufferable ssh password guessers has me reprise my "The Hail Mary Cloud and the Lessons Learned" https://nxdomain.no/~peter/hailmary_lessons_learned.html piece, with a note added at the end about endlessh as a possible refinement (yes, I use it) #ssh #passwords #passwordguessing #passwordgroping #endlessh #openbsd #freebsd #pf #packetfilter #security #cybercrime

A mention elsewhere of the insufferable ssh password guessers has me reprise my "The Hail Mary Cloud and the Lessons Learned" https://nxdomain.no/~peter/hailmary_lessons_learned.html piece, with a note added at the end about endlessh as a possible refinement (yes, I use it) #ssh #passwords #passwordguessing #passwordgroping #endlessh #openbsd #freebsd #pf #packetfilter #security #cybercrime

A mention elsewhere of the insufferable ssh password guessers has me reprise my "The Hail Mary Cloud and the Lessons Learned" https://nxdomain.no/~peter/hailmary_lessons_learned.html piece, with a note added at the end about endlessh as a possible refinement (yes, I use it) #ssh #passwords #passwordguessing #passwordgroping #endlessh #openbsd #freebsd #pf #packetfilter #security #cybercrime

A mention elsewhere of the insufferable ssh password guessers has me reprise my "The Hail Mary Cloud and the Lessons Learned" https://nxdomain.no/~peter/hailmary_lessons_learned.html piece, with a note added at the end about endlessh as a possible refinement (yes, I use it) #ssh #passwords #passwordguessing #passwordgroping #endlessh #openbsd #freebsd #pf #packetfilter #security #cybercrime

So, genug genervt.
Jetzt muss es #endlessh richten.

https://github.com/skeeto/endlessh

Защита от брутфорса и эксплоитов OpenSSH

В последних версиях OpenSSH появилась защита от брутфорса (перебора) паролей, а также от попыток эксплоита. Это очень ценные настройки, которыми разработчики рекомендуют воспользоваться всем. Нужно отметить, что новая функция OpenSSH фундаментально отличается от fail2ban , sshguard и подобных инструментов, поскольку она не парсит логи и не изменяет правила файрвола, а применяет опции только внутри одной программы, не обращаясь никуда через ядро, что делает её гораздо безопаснее вышеупомянутых утилит.

https://habr.com/ru/companies/globalsign/articles/835316/

#SSH #OpenSSH #sshd #PerSourcePenalties #PerSourcePenaltyExemptList #sshkeyscan #брутфорс #подбор_паролей #fail2ban #sshguard #Endlessh

Instead it DROPing brute-force #ssh via #fail2ban, redirect them to #endlessh... 😄

I'm now running my first public service online: a tarpit that bans you.

#endlessh #selfhosting #SSH

Updated #NixOS to 22.11 on my VPS today. It was deliciously boring; only changes I had to do was remove a custom service for #endlessh (now included in nixpkgs), and explicitly set the adapter for my #Caddy config file.

Hey les sysadmin vous connaissez #endlessh ?
« Endlessh est un logiciel très simpliste qui expose un faux serveur SSH avec une bannière d'une longueur infinie qui n'offre aucun prompt d'authentification au client du service. »
https://www.geeek.org/bruteforce-ssh-endlessh/

J'adore le principe, j'ai bien envie de l'installer sur mes serveurs 😜

Trap hackers in your server using Endlessh as a SSH Honeypot and wastes their time

Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. The purpose is to put your real SSH server on another port and then let the script kiddies get stuck in this tarpit instead of bothering a real server.

See
https://i.ytimg.com/vi/SKhKNUo6rJU/hqdefault.jpg

SSH Honeypot in 4 Minutes - Trap Hackers in Your Server
by Wolfgang's Channel on YouTube

#technology #hacking #security #SSH #Endlessh
https://matomo.gadgeteer.co.za/piwik.php?idsite=1&rec=1&url=https%3A%2F%2Fgadgeteer.co.za%2Ftrap-hackers-in-your-server-using-endlessh-as-a-ssh-honeypot-and-wastes-their-time%2F%3Fpk_campaign%3Dfeed%26pk_kwd%3Dtrap-hackers-in-your-server-using-endlessh-as-a-ssh-honeypot-and-wastes-their-time&action_name=Trap+hackers+in+your+server+using+Endlessh+as+a+SSH+Honeypot+and+wastes+their+time&urlref=https%3A%2F%2Fgadgeteer.co.za%2Ffeed%2F

https://youtu.be/SKhKNUo6rJU https://squeet.me/objects/962c3e1097d7390d2b274442c8139b9f70672f4d

I really enjoy watching #syslog for #endlessh entries. Record for last 24 hours was 42852 seconds or close to 12 hours.

SSH Honeypot in 4 Minutes - Trap Hackers in Your Server #endlessh #ssh #honeypot
https://www.youtube.com/watch?v=SKhKNUo6rJU

#Endlessh is a #publicdomain #SSH #tarpit.

Endlessh (Endless SSH) is a barebones SSH server that traps any clients that attempt to connect. When a connection is made Endlessh sends an endless stream of junk data at a slow rate that forces the client to wait. Endlessh can trap hundreds of clients for days or weeks with minimal performance impact. Endlessh is useful for trapping bots on false SSH ports.

Website 🔗️: https://github.com/skeeto/endlessh

#free #opensource #foss #fossmendations #sysadmin