So I opened up one port on my network for an SFTP server, and in just the last 7 days there have been 611 attempts to log into it... It's always interesting to see the usernames that try to log in, so I pulled them and sorted them all out.

• pshitt

  2 150 0.0 Python

  Passwords of SSH Intruders Transferred to Text

check out https://github.com/regit/pshitt

• ipsum

  10 1,299 2.8

  Daily feed of bad IPs (with blacklist hit scores)

Do yourself a favor and load up your iptables with the ipsum blacklist.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• sshesame

  3 1,394 0.0 Go

  An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

I started an SSH honeypot project with the goal of finding out what these attackers (bots mainly) would do if they did get in.

• endlessh

  40 6,868 0.0 C

  SSH tarpit that slowly sends an endless banner

I run endlessh on my home server. It's an ssh tarpit, which means it isn't actually an ssh server at all, it just poses as an ssh server to any connection, and after the initial handshake, it just infinitely and very slowly continues to send ssh banner data to the client.

• minerstat-os

  4 26 3.4 Shell

  Discontinued msOS - Open Source Mining OS. Repository moved, no longer using github

  

It's Linux mining OS and looks like someone is scanning for potential targets. Unsuccessfully that is, because OS is by default locked from outside access.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project