Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

I'm running a honeypot...

Yeah the title is self explanative, I got a 5 dollar VPS and set up cowrie, I'm really just looking to see which tecniques people are currently using when they get access, which binaries they load and such, not looking to report it to any CTI agency just learning!

I'm probably also going to make a blog post about it and drop all the stats, binaries, commands..

Wait for 1-2 weeks!!
Nice. HF removed its blog section, but I look forward to seeing what you got.

And you can report attacks to AbuseIPDB.
Will be interesting to see what you get, have you had any hits already?
[Image: New-Project.png]
pretty cool bro let us know what you get :D
[Image: Evanders-Signature1-ezgif-com-optimize-1.gif]
(Jul 16, 2026 06:35 AM)Wake Wrote:  Will be interesting to see what you get, have you had any hits already?

So far only 1 ip that keeps logging in, and running "uname -a" every time...
(Jul 16, 2026 08:25 AM)cl0udzz Wrote:  So far only 1 ip that keeps logging in, and running "uname -a" every time...

what a coincidence i just found a ssh brute forcer in pastebin that runs uname -a


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SIM-3833886Jan 23, 2021 05:11 PM 11 533 Jan 23, 2021 05:11 PM
Last Post: gucciuser
by ℜubyJan 27, 2020 12:26 PM 6 1,167 Jan 27, 2020 12:26 PM
Last Post: Young Sosa
by HFGreyDeadpoolJan 25, 2019 03:14 PM 7 338 Jan 25, 2019 03:14 PM
Last Post: SUI-3183372