Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Got remote error, code 11 #201

Open
alallier opened this issue Mar 25, 2016 · 0 comments
Open

Got remote error, code 11 #201

alallier opened this issue Mar 25, 2016 · 0 comments

Comments

@alallier
Copy link

For every connection, other than my own to test, I receive error code Got remote error, code 11 (which I looked up and means disconnected by user). Does this mean that people are figuring out that what they are trying to connect to is a honeypot?

Subset of logs below

2016-03-25 13:07:06-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:49270 (128.153.145.180:2222) [session: 8]
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 13:07:07-0400 [HoneyPotTransport,8,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] NEW KEYS
2016-03-25 13:07:08-0400 [HoneyPotTransport,8,58.218.211.244] starting service ssh-userauth
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] Got remote error, code 11
        reason:
2016-03-25 13:07:09-0400 [HoneyPotTransport,8,58.218.211.244] connection lost
2016-03-25 14:19:49-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.244:48824 (128.153.145.180:2222) [session: 9]
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 14:19:51-0400 [HoneyPotTransport,9,58.218.211.244] incoming: aes128-ctr hmac-sha1 none
2016-03-25 14:19:52-0400 [HoneyPotTransport,9,58.218.211.244] NEW KEYS
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] starting service ssh-userauth
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] Got remote error, code 11
        reason:
2016-03-25 14:19:53-0400 [HoneyPotTransport,9,58.218.211.244] connection lost
2016-03-25 14:22:22-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 80.82.78.66:59236 (128.153.145.180:2222) [session: 10]
2016-03-25 14:22:32-0400 [HoneyPotTransport,10,80.82.78.66] connection lost
2016-03-25 15:24:19-0400 [kippo.core.honeypot.HoneyPotSSHFactory] New connection: 58.218.211.11:40244 (128.153.145.180:2222) [session: 11]
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] Remote SSH version: SSH-2.0-PUTTY
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] outgoing: aes128-ctr hmac-sha1 none
2016-03-25 15:24:19-0400 [HoneyPotTransport,11,58.218.211.11] incoming: aes128-ctr hmac-sha1 none
2016-03-25 15:24:20-0400 [HoneyPotTransport,11,58.218.211.11] NEW KEYS
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] starting service ssh-userauth
2016-03-25 15:24:21-0400 [HoneyPotTransport,11,58.218.211.11] Got remote error, code 11
        reason:
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant