Hack Forums
I'm running a honeypot... - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: I'm running a honeypot... (/showthread.php?tid=6328562)



I'm running a honeypot... - cl0udzz - Jul 16, 2026

Yeah the title is self explanative, I got a 5 dollar VPS and set up cowrie, I'm really just looking to see which tecniques people are currently using when they get access, which binaries they load and such, not looking to report it to any CTI agency just learning!

I'm probably also going to make a blog post about it and drop all the stats, binaries, commands..

Wait for 1-2 weeks!!


RE: I'm running a honeypot... - DramaKing - Jul 16, 2026

Nice. HF removed its blog section, but I look forward to seeing what you got.

And you can report attacks to AbuseIPDB.


RE: I'm running a honeypot... - Wake - Jul 16, 2026

Will be interesting to see what you get, have you had any hits already?


RE: I'm running a honeypot... - ViewsEvaders - Jul 16, 2026

pretty cool bro let us know what you get :D


RE: I'm running a honeypot... - cl0udzz - Jul 16, 2026

(Jul 16, 2026 06:35 AM)Wake Wrote:  Will be interesting to see what you get, have you had any hits already?

So far only 1 ip that keeps logging in, and running "uname -a" every time...


RE: I'm running a honeypot... - U23Ser - Jul 20, 2026

(Jul 16, 2026 08:25 AM)cl0udzz Wrote:  So far only 1 ip that keeps logging in, and running "uname -a" every time...

what a coincidence i just found a ssh brute forcer in pastebin that runs uname -a