#honeypot on Hacker News

5 stories tagged honeypot, newest first.

Screenshot of aws.amazon.com: Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure (aws.amazon.com)

227 points by cubefox 4 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.

php php2shell zero-day vulnerability-disclosure

Screenshot of llm2human.pages.dev: LLM Honeypot

LLM Honeypot (llm2human.pages.dev)

352 points by 8thom 2 months ago | 96 comments

A satirical retro GeoCities-style site for a fictional "LLM2Human Clinic" claiming to turn large language models into real people, apparently built as an LLM honeypot.

llm honeypot satire retro-web

Screenshot of blog.sofiane.cc: What You Get After Running an SSH Honeypot for 30 Days

What You Get After Running an SSH Honeypot for 30 Days (blog.sofiane.cc)

476 points by SofianeHamlaoui 2 years ago | 315 comments

Blog post describing observations, attacker commands, and malware samples (e.g. BASHLITE/Gafgyt) collected from running an SSH honeypot for 30 days.

ssh honeypot malware bashlite

Screenshot of github.com: Xzbot: Notes, honeypot, and exploit demo for the xz backdoor

Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (github.com)

816 points by q3k 2 years ago | 425 comments

GitHub repository with notes, a honeypot, and an exploit demo for the xz backdoor (CVE-2024-3094), including Go code and an OpenSSH patch.

xz-backdoor cve-2024-3094 openssh exploit

Screenshot of brute.fail: Brute.Fail: Watch brute force attacks fail in real time

Brute.Fail: Watch brute force attacks fail in real time (brute.fail)

626 points by mike_d 3 years ago | 231 comments

Brute.Fail is a live feed showing real-time SSH and other login attempts by attackers guessing usernames and passwords against honeypot servers.

brute-force ssh honeypot credential-stuffing

#honeypot on Hacker News

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

LLM Honeypot(llm2human.pages.dev)

What You Get After Running an SSH Honeypot for 30 Days(blog.sofiane.cc)

Xzbot: Notes, honeypot, and exploit demo for the xz backdoor(github.com)

Brute.Fail: Watch brute force attacks fail in real time(brute.fail)

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure (aws.amazon.com)

LLM Honeypot (llm2human.pages.dev)

What You Get After Running an SSH Honeypot for 30 Days (blog.sofiane.cc)

Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (github.com)

Brute.Fail: Watch brute force attacks fail in real time (brute.fail)