3 ms·
Someday I'm going to put all the different pieces together and have things like SMTP & SSH auth failures, hosts hitting my spamtraps, bots scanning for open 23/
by jlgaddis 9y ago
Someday I'm going to put all the different pieces together and have things like SMTP & SSH auth failures, hosts hitting my spamtraps, bots scanning for open 23/TCP, and so on, to where I end up with one central host collecting all those events and injecting /32 routes for those IPs towards null0 in my core.
- jacquesm 9y agoA friend of mine built this complete with a whole pile of honeypots and lots of companies use it. https://www.blockedservers.com/ https://www.blockedservers.com/ Super useful.