Why so many bots?

• ssh-audit

  21 3,133 8.6 Python

  SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc) (by jtesta)

• masscan

  64 22,637 7.8 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• endlessh

  40 6,868 0.0 C

  SSH tarpit that slowly sends an endless banner

You can reduce the noise a lot by moving ssh to a non standard port. Security through obscurity isn't actually security, but it will reduce the number of attempts you receive. Another thing I like to do is put Endlessh on the standard port 22. That way as bots go by they will get stuck or at least slow down on that connection.

Suggest a related project