Skip to content

Instantly share code, notes, and snippets.

@seraphyn
Created February 27, 2015 09:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save seraphyn/fb2934ee70bd7c6c9de9 to your computer and use it in GitHub Desktop.
Save seraphyn/fb2934ee70bd7c6c9de9 to your computer and use it in GitHub Desktop.
Put your sshd on another Port and if somebody scans port 22 he will be blocked for 10 minutes
#!/bin/sh
# Put SSHd on another Port
# If someone scans your typical sshport 22 he will be blocked for 10 Minutes
HP_IPT='/sbin/iptables'
HP_Port=22
HP_Time=600
$HP_IPT -N honeypot
$HP_IPT -A INPUT ! -s 127.0.0.1 -j honeypot
$HP_IPT -A honeypot -m recent --update --seconds $HP_Time --name portscan -j DROP
$HP_IPT -A honeypot -p tcp -m tcp --dport $HP_Port -m recent --name portscan --set -j LOG --log-prefix "IPTABLES -- HONEYPOT -- P $HP_Port " --log-level 6 --log-ip-options
$HP_IPT -A honeypot -p tcp -m tcp --dport $HP_Port -m recent --name portscan --set -j DROP
$HP_IPT -A honeypot -j RETURN
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment