> My favorite is to implement a tarpit while moving the ssh port. For those who,... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rualca on Sept 25, 2021 | parent | context | favorite | on: AS13335 doing SSH scanning

> My favorite is to implement a tarpit while moving the ssh port.

For those who, like me, are unfamiliar with the concept of a SSH tarpit, it's a technique consisting of inserting delays into SSH connection attempts.

Old HN discussion on Endlessh:

https://news.ycombinator.com/item?id=24491453

hda111 on Sept 25, 2021 [–]

Isn’t this easily detectable for any malicious script? Just a small timeout and try the next port.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact