search

desaster / kippo

Kippo - SSH Honeypot
1.63k stars 277 forks source link

Keep getting connection lost #85

Open ghost opened 10 years ago

ghost commented 10 years ago

From up676052@myport.ac.uk on August 17, 2013 18:48:09

What steps will reproduce the problem? 1.Someone connects to me 2.Then they disconnect within 4 to 5 seconds 3.The problem just repeats

I am using ubuntu updated abd using newest kippo.

2013-08-17 15:42:17+0100 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 218.59.209.135:40821 (1$ 2013-08-17 15:42:22+0100 [HoneyPotTransport,27,218.59.209.135] connection lost 2013-08-17 16:03:15+0100 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 218.59.209.135:37157 (1$ 2013-08-17 16:03:19+0100 [HoneyPotTransport,28,218.59.209.135] connection lost 2013-08-17 16:24:14+0100 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 218.59.209.135:40248 (1$ 2013-08-17 16:24:18+0100 [HoneyPotTransport,29,218.59.209.135] connection lost 2013-08-17 16:45:07+0100 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 218.59.209.135:57091 (1$ 2013-08-17 16:45:12+0100 [HoneyPotTransport,30,218.59.209.135] connection lost

Just an example... is something disconnecting them?

Original issue: http://code.google.com/p/kippo/issues/detail?id=85

ghost commented 10 years ago

From overchecking on September 04, 2013 07:45:41

their just checking to see if the port is actually open, most likely a port scanner.

ghost commented 10 years ago

From pommesspezial on February 19, 2014 04:38:02

See also https://code.google.com/p/kippo/issues/detail?id=43 It can have different reasons.