3 ms·
That looks cool. So, with project satyr, you are hoping that attackers would access your honeypot proxies from their actual IP? I find that hard to believe. Mos
by udev4096 1y ago
That looks cool. So, with project satyr, you are hoping that attackers would access your honeypot proxies from their actual IP? I find that hard to believe. Most of them either use a reputed VPN or Tor as their first point of entry so you are just hoping for low hanging fruits here, which makes for a shitty threat intel
- Sakura-sx 1y agoNot really, most DDoS attacks are made from servers, taking down those servers makes the attacker need to get new ones. And from the logs I can assure you that 90% of the time it is a server, and the rest it is either residential IPs or VPNs but residential IPs are seen more i'd say.