kippo
kippo copied to clipboard
Got remote error, code 11
For every connection, other than my own to test, I receive error code Got remote error, code 11
(which I looked up and means disconnected by user
). Does this mean that people are figuring out that what they are trying to connect to is a honeypot?
Subset of logs below
2016-03-25 13:07:06-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:49270 (128.153.145.180:2222) [session: 8]
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] NEW KEYS
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] starting service ssh-userauth
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] Got remote error, code 11
reason:
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] connection lost
2016-03-25 14:19:49-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:48824 (128.153.145.180:2222) [session: 9]
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 14:19:52-0400 [HoneyPotTransport,9,58.218.211.244] NEW KEYS
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] starting service ssh-userauth
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] Got remote error, code 11
reason:
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] connection lost
2016-03-25 14:22:22-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 80.82.78.66:59236 (128.153.145.180:2222) [session: 10]
2016-03-25 14:22:32-0400 [HoneyPotTransport,10,80.82.78.66] connection lost
2016-03-25 15:24:19-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.11:40244 (128.153.145.180:2222) [session: 11]
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] incoming: aes128-ctr hmac-sha1 none
2016-03-25 15:24:20-0400 [HoneyPotTransport,11,58.218.211.11] NEW KEYS
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] starting service ssh-userauth
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] Got remote error, code 11
reason: