Honeypot program

[Craz1000]

This program will listen on port 23. On a connection it will store the IP, then disconnect. once 50 unique IPs are recorded it will create a firewall rule in windows firewall. Rinse and repeat.

[johnno56]

I mean no offense. But my understanding of "listening" to ports is non existent. May I ask why this is being done or what is the purpose of such a program and how does it benefit the average user? Just curious.

[Craz1000]

Port 23 is the most scanned port in existence. Every port scanner will ping it. So if you for example are running a server at the front of your network you can use this to gather the IP address of people either scanning your network or straight attempting to telnet in. Naturally you would want to block these address with your firewall.

This program simply automates this process. This is how most honeypot type programs work.
Is this useful for the average user, absolutely not. It is only useful to those who run a windows machine at the edge of their network.

[johnno56]

Understood.

"Honeypot"? Could be interpreted as something to "attract" or "trap". I suppose the programmers intent will determine that... Many thanks for the info. Much appreciated.

J

[Craz1000]

You are dead on. These are called Honeypots because they are just that, a trap. I wrote this to gather ip addresses of people scanning my server at the front end, and automate adding these ips to the firewall so i dont have to spend time rummaging through the logs.

[johnno56]

Cool...