4 ms·
You don't even need a honeypot, simply ban ip addresses for some time after X failed login attempts.
by cycomanic 7y ago
You don't even need a honeypot, simply ban ip addresses for some time after X failed login attempts.
- lloeki 6y agoThe point of the honeypot is that there's no heuristic causing any delay or elusive attacker being missed (e.g botnet trying once per IP). You don't even need any processing time, nor even complete syn/synack/ack: any TCP connection attempt to that port triggers an instaban.