Confuse some SSH bots and make botters block you

Bender1 pts0 comments

Confuse some SSH bots and make botters block you.

Goal: Intentionally allow public SSH and/or SFTP to most of the internet while giving some SSH bots something to think about rather than entirely blocking them.<br>Get the botter to exclude us rather than us having to whack-a-mole their 250,000+ IP adddresses each.

Precaution: Test locally first and/or be logged into a out-of-band console to test. Do not use in production. May break some unmaintained SSH API clients using old libraries.

Example sshd_config using OpenSSH 10.<br>Ensure one is on OpenSSH 10 or later.

The VersionAddendum will cause most poorly coded bots to hang,<br>thus causing the botter to exclude us from their scans rather than us having to block them.

sshd -V<br>OpenSSH_10.0p2, OpenSSL 3.5.4 30 Sep 2025

Add a long annoying banner_sftp.txt banner to crap up some bot console output.

Verify SSH may restart correctly:

sshd -T<br># if good, then restart sshd.

Browse this directory.

bots block rather sshd confuse make

Related Articles