💾 Archived View for cjc.im › 2015 › 07 › 02 › Running-denyhosts-on-the-honeypot › index.gmi captured on 2022-04-29 at 11:21:05. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2022-03-01)

-=-=-=-=-=-=-

Running denyhosts on the honeypot

Jul 02, 2015

Unsurprisingly, there was a significant reduction in the number of attempts as the denyhosts daemon bans IP addresses after a specific number of attempts. Overall there was 277 IP Addresses that were added to the blacklist. From the blacklisted hosts, there was a further 1673 attempts rejected. There was a total of 2117 failed attempts, down from the usual numbers in the 100,000 sort of range.

SSH Login attempts

Even quieter over this period

Attempts | Login
1270     | root
103      | ubnt
69       | admin
49       | support
27       | guest
20       | pi
13       | ftpuser

Trailing off very quickly thanks to deny hosts, the pi username has shot up the rankings this week!

Back to home page