Tag Info

New answers tagged

1

How to diagnose if you are under a brute scan or a targeted attack? If you have the possibility to do so, keep free a specific public @IP within your network. Register it correctly on the DNS as a typical name for a web server. But don't attribute this @IP to any real machine within your network. I mean don't go as far as to create a honey pot, just create ...


0

It is difficult to know whether you are being targeted specifically. It is very likely that you are getting hit with automated scans that can be ignored as long as you have configured your firewall to block all incoming traffic. Phishing attacks and outbound connections to malicious sites are much more serious as they are more likely to succeed. Here is a ...


5

Being hit hundreds or thousands of times per day is completely normal, and I wouldn't worry about it at all. There are a few major sources of suspicious traffic: Automated scanners. A number of organizations "map" the Internet and produce a ton of traffic. They do so more or less randomly. I've gotten a lot of traffic on ports 80 and 443 despite not ...


0

you should change your hostname too btw this bash script can be useful (macchanger should be installed): echo "" echo "THIS SCRIPT WILL SET A RANDOM HOSTNAME AND" echo "RENEW YOUR I.P. WITH A RANDOM MAC ADDRESS" echo "" echo "" echo "TO ABORT PRESS: Ctrl+c" echo "" echo "PRESS ENTER TO CONTINUE: " read enter sleep 0.25 clear sleep 0.5 #Get Random String ...


5

You could sniff the network for traffic and change your network configuration to an active machine(i.e. MAC address): # ifconfig wlan0 down # ifconfig wlan0 hw ether DE:AD:66:55:12:34 <== sniffed MAC # ifconfig wlan0 up assuming wlan0 is your wireless network interface. On Windows you can do something like this. Now there should be two work stations ...


1

AFAIK several implementations exist, but openess is often limited by competitive advantage (AV companies for example). Microsoft has published much of their honeymonkey project. See http://research.microsoft.com/en-us/um/redmond/projects/strider/honeymonkey/ for more details.


1

A honeypot is not a plugin which will defend you while surfing. For this you already have several plugins available, each one dedicated to face different kind of attacks (whether it is phishing, tracking, SSL / JavaScript / Flash related, etc.). A honeypot on the contrary is made to attract and allow attacks to better study them. The way I could imagine ...


0

If I understood well your question's title, and if you are looking for opensource stuff: I know, FireFox and Chromium are Open-Source and would be the base for such Honey-Browser. then you can use, for instance, Thug which is a browser emulator written in Python automatically interacts with the malicious website to check its exploits. There are also ...


1

I would guess that this is an automated attack which does not have too much intelligence built-in. A sign of an automated script would be other (possibly unrelated) attempts from the same IP.



Top 50 recent answers are included