Here is an app idea I had: a daemon runs, and it opens 20-30 ports. These ports simulate ssh/telnet/imap servers, at least for limited interactions, but do not actually do anything. They may also run slowly, to consume time on the part of the attacker.
When a user connects to these phony ports, their IP is blocked, or at least blocked from the ports which run legitimate services.
Are there any similar programs, or perhaps some flaw with this idea that I'm not seeing?
When a user connects to these phony ports, their IP is blocked, or at least blocked from the ports which run legitimate services.
Are there any similar programs, or perhaps some flaw with this idea that I'm not seeing?