kippo icon indicating copy to clipboard operation
kippo copied to clipboard

Got remote error, code 11

Open alallier opened this issue 8 years ago • 0 comments

For every connection, other than my own to test, I receive error code Got remote error, code 11 (which I looked up and means disconnected by user). Does this mean that people are figuring out that what they are trying to connect to is a honeypot?

Subset of logs below

2016-03-25 13:07:06-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:49270 (128.153.145.180:2222) [session: 8]
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] NEW KEYS
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] starting service ssh-userauth
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] Got remote error, code 11
        reason:
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] connection lost
2016-03-25 14:19:49-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:48824 (128.153.145.180:2222) [session: 9]
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 14:19:52-0400 [HoneyPotTransport,9,58.218.211.244] NEW KEYS
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] starting service ssh-userauth
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] Got remote error, code 11
        reason:
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] connection lost
2016-03-25 14:22:22-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 80.82.78.66:59236 (128.153.145.180:2222) [session: 10]
2016-03-25 14:22:32-0400 [HoneyPotTransport,10,80.82.78.66] connection lost
2016-03-25 15:24:19-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.11:40244 (128.153.145.180:2222) [session: 11]
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] incoming: aes128-ctr hmac-sha1 none
2016-03-25 15:24:20-0400 [HoneyPotTransport,11,58.218.211.11] NEW KEYS
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] starting service ssh-userauth
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] Got remote error, code 11
        reason:

alallier avatar Mar 25 '16 15:03 alallier