tusksm

3 ms·

1.
by tusksm 2mo ago
Added https://honeypotlive.cc/campaigns/ to view combined campaigns. For now, only in strict high-confidence clusters.
2.
by tusksm 2mo ago
That was my first impression too, since the SSH-key installation attempts are much more frequent and tend to dominate the feed. I did find at least one campaign that went further: it tried to fetch ` http://41.216.189.157/run
3.
by tusksm 2mo ago
You're right. HN traffic quickly turned the live feed from bot activity into a wall of human-generated test payloads. I'm already working on truncating long values and grouping events by source. The next step will probably be rate
4.
by tusksm 2mo ago
Hi HN, I maintain several web servers and kept seeing a constant stream of SSH login attempts. At some point I became curious: what do these bots actually try to do after they get in? I set up a Cowrie SSH honeypot and built a small live da
5.
Show HN: Watch bots interact with an SSH honeypot in real time(honeypotlive.cc)
181 points by tusksm 2mo ago|63 comments
6.
Community validated news to telegram channel(github.com)
1 points by tusksm 3y ago|1 comments
7.
by tusksm 3y ago
Parses HN top news and GitHub trands and sends them to a telegram channel It would be great if you could recommend other sources for this channel
8.
Download Free MP3(downloadfreemp3.site)
4 points by tusksm 3y ago|2 comments
9.
by tusksm 3y ago
The search is through the shazam API (I don't know how restrictions on its use work). Downloading is implemented via audio extraction from video, which returns shazam for each track. Sometimes video doesn't match the requested t