Large scale Internet SSH brute force attacks seem to have stopped here

• crowdsec

  169 7,774 9.6 Go

  CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

  

The CrowdSec folks have something similar to that:

https://crowdsec.net/ https://github.com/crowdsecurity/crowdsec

• tinyssh

  8 1,389 5.0 C

  TinySSH is small server (less than 100000 words of code)

> [after] hardening steps [...] most of the bots can't even negotiate a connection

Yep, same here, except I'm using [tinyssh], which organically does not support anything other than ed25519/curve25519, sha256, and chacha-poly.

[tinyssh] https://tinyssh.org/

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• endlessh

  40 6,868 0.0 C

  SSH tarpit that slowly sends an endless banner

• masscan

  64 22,637 7.8 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

"Not hard", to say the least, yeah:

https://github.com/robertdavidgraham/masscan

• server-side-tls

  37 1,119 2.5 HTML

  Server side TLS Tools

  

Same for www. Ratchet up the TLS/SSL - https://ssl-config.mozilla.org/ - go for modern and you'll see a lot of failed connections from bots and scanners.

Also, if you don't use any other IP block list, do use DROP from Spamhaus: https://www.spamhaus.org/drop/ - that is small enough that you can run it on the webserver if you don't have much control over your connection to the outside world.

• laravel-echo-server

  7 2,635 0.0 TypeScript

  Discontinued Socket.io server for Laravel Echo

• ssh-tarpit

  1 33 0.0 Python

  SSH tarpit that slowly sends an endless banner

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• sshlog

  1 18 10.0 C

  Discontinued Patch to log OpenSSH Passwords (by 62726164)

Suggest a related project