Honeypot as a Service
haas.nic.cz
Honeypot as a Service
1–10 of 15 posts
Re: Honeypot as a Service
#2This is a great early detection mechanism for malware.
Providers like Crowdstrike https://www.crowdstrike.com/ already aggregate results of malware scans for customers.
This is different because it is National CSIRT of the Czech Republic and because it is a honeypot, it will let the attacker use more commands.
Re: Honeypot as a Service
#3This is great, but why not join forces with Project Honeypot?
https://www.projecthoneypot.org/
Re: Honeypot as a Service
#4Why would anyone do this!?
"You will get interesting information about the attacks"
(╭ರ_ ⊙ )
Re: Honeypot as a Service
#5If a honeypot is widely used, won't scammers just detect the honeypot? or even just detect latency from their connection being proxied elsewhere?
Re: Honeypot as a Service
#6If a honeypot is widely used, won't scammers just detect the honeypot? or even just detect latency from their connection being proxied elsewhere?
> won't scammers just detect the honeypot
It's fairly difficult to detect a well-made honeypot.
>even just detect latency from their connection being proxied elsewhere
Not if the attacker is legitimately placed far away from you. Also, from my experience these bots have very large timeouts set.
Re: Honeypot as a Service
#7> "Your computer stays safe because all communication is redirected to our server."
Won't they see the packets hopping to other devices via a command like 'traceroute'?
Re: Honeypot as a Service
#8> "Your computer stays safe because all communication is redirected to our server." Won't they see the packets hopping to other devices via a command like 'traceroute'?
Depends on what networking layer they're proxying. Layer 4 with something like PROXY protocol and it's not as easy to tell.
Re: Honeypot as a Service
#9Last update, 2018. Cool.
Re: Honeypot as a Service
#10If a honeypot is widely used, won't scammers just detect the honeypot? or even just detect latency from their connection being proxied elsewhere?
You are giving these script kiddies far too much credit.
The authors of the tools they use may try to implement honeypot detection, but that's fruitless cat & mouse game, and to what end?
Assuming "honeypot" based on latency is a fool's errand because many legitimate things can induce latency.