amony

4 ms·

1. 1.▲
   Timestomp for Linux(blog.darkinfo.org)

   3 points by amony 4y ago|0 comments
2. 2.▲
   Exfiltrate Data with NTP(github.com)

   5 points by amony 4y ago|0 comments
3. 3.▲
   by amony 4y ago

   No. It parses that protocol and logs the metadata observed (time, duration, bytes, source IP, destination IP, ports, cert info, etc.) Edit: I suppose it could be configured to do that. I've used Zeek in several organizations over the
4. 4.▲
   by amony 4y ago

   Thank you. I would prefer to maintain full control of access to the site and not trust a large vendor such as CF. I know they have mechanisms that would stop this, but they may also impact normal users in a negative way.
5. 5.▲
   by amony 4y ago

   Zeek is a network protocol parser used to monitor network activity. It parses protocols such as SMTP, DNS, TLS, HTTP, FTP, File, SSH, etc. and collects metadata about that activity. Here's some of the DNS fields it extracts as it obser
6. 6.▲
   by amony 4y ago

   Here are some examples. They are probing the website for vulnerabilities in web frameworks that I am not using. The probes are generating a lot of logs, incorrect referrer stats, etc: 1.2.3.4 - - [15/Oct/2022:08:36:42 +0000]
7. 7.▲
   Ask HN: Are Whois Abuse Reports Useful?

   37 points by amony 4y ago|43 comments