Zum Hauptinhalt springen
Blogbeitrag

CW 22/2021 - Software: ssh-tarpit

In the public world wide web, there are a lot of organizations and services that regularly scan and analyze open ports.

Surely, one big part of this are automated bots trying to login to default user accounts via ssh.

There are ways to protect yourself from these intents and finally there is even an option for you to improve the general health of the internet.

The ssh-tarpit uses the ssh banner to strech out the pre-login communication for an almost unlimited time.
This way there is an constant connection (of little volume) between both computers, locking 1 Port of the malicious host.

Link: https://pypi.org/project/ssh-tarpit/
Guides at Youtube: https://redirect.invidious.io/search?q=ssh-tarpit
Hint: You may also find some similar programms like: https://github.com/skeeto/endlessh