OrionEye pitches kernel-level SSH botnet blocking as a way to save CPU and energy

OrionEye says its Green Active Defence approach blocks SSH botnets at the kernel layer to cut server CPU waste, lower hosting costs and reduce carbon emissions. The company says the system is designed for everything from home VPS setups to enterprise data centres and keeps telemetry on premises or in a local encrypted vault.

Why it matters: - SSH botnets can burn server CPU on useless login attempts, which can force users to pay for bigger instances and can raise cooling and power costs in larger environments. - OrionEye is framing cybersecurity as an infrastructure efficiency issue, not just a breach-prevention problem. - The pitch ties security operations to energy use and carbon emissions, which could matter to cloud customers under pressure to cut operating costs.

What happened: - OrionEye, based in Hattenhofen, Bavaria, Germany, introduced Green Active Defence as a way to stop automated SSH brute-force attacks before they reach the application layer. - The company says the system uses threat telemetry and AI model correlation to identify repeated attack attempts as coordinated campaigns. - OrionEye says attacks are blocked directly at the kernel layer. - The company says more information, technical documentation and live demonstrations are available at more information.

The details: - OrionEye says traditional security tools often block attacks late, after malicious connections have already consumed system resources. - The company says its approach restores processing capacity for legitimate workloads by stopping attack traffic at the lowest possible layer. - OrionEye says the platform can reduce power consumption, cooling demand and hosting overhead across connected nodes. - The company says real-world telemetry from live infrastructure shows SSH brute-force attempts consume about 540 seconds of continuous 100% CPU time per server each day. - OrionEye says that at a deployment scale of 10,000 servers over one year, the wasted energy translates into tons of unnecessary carbon emissions and tens of thousands of euros in wasted hardware allocation. - The company says the efficiency gains could equal the energy used to drive tens of thousands of kilometres in a standard passenger vehicle. - OrionEye says the approach avoids the need for expensive proprietary security hardware.

Between the lines: - The announcement is as much a cost-saving and sustainability pitch as a security product release. - OrionEye is positioning kernel-level blocking and local data handling as alternatives to cloud-dependent security stacks. - The company is also trying to make AI-assisted threat investigation sound compatible with data sovereignty requirements. - The framing suggests OrionEye is targeting organizations that want lower infrastructure spend without adding separate security appliances.

What's next: - OrionEye says OmniAgent OS pairs with the platform to keep telemetry and security records on premises or in an encrypted local vault. - The company says the system includes multi-engine OSINT aggregation and multi-LLM orchestration for natural-language threat investigations. - OrionEye is directing users to its website for technical documentation and demos as it pushes the Green Active Defence concept.

The bottom line: - OrionEye is betting that stopping SSH botnets earlier in the stack can save both server capacity and energy, turning cybersecurity into an efficiency play as well as a defensive one.