Honeypot Autoblocking Option

Casey Blackburn

• April 25, 2024 12:43

Since we've setup our Cerberus server, we've seen a ton of connection attempts from random IPs on the internet.  Our assumption is that these are just scripts/bots doing automated scans.

We'd love a way to automatically block these individuals.

Suggestion: Allow us to setup an Listener as a Honeypot that will automatically block the IP of anyone that attempts to connect to it.

Example: Since we aren't using port 21 at the moment, we'd tag port 21 as our honey pot.  To us, this would mean that no legitimate traffic should ever attempt to connect to port 21.  Therefore, we'd want any connection attempts on port 21 to result in an IP block with a description of "Auto-blocked: Honeypot".

 

1

• 

  Connor Woolfolk

  Community Manager

  • April 25, 2024 13:20

  Hello Casey,

  Thanks so much for taking the time to submit this request. I will forward it on to our Product team for their review, if we need any further details regarding this submission, we will reach out here, or through a ticket.

  0

Please sign in to leave a comment.