Home » Articles posted by Jesse Bowling
Author Archives: Jesse Bowling
How long should you block?
One question we get a lot is “how long should we block IP’s observed by STINGAR honeypots?” Generally, we’ve explained that we block for seven days, a number we arrived at through the highly scientific process of “I dunno…seven days sounded good and we’ve never had reason to change it”. 🙂 While more research needs […]
CommunityHoneyNetwork version 1.8 released!
Hi All, We’re happy to announce the release of version 1.8 of CommunityHoneyNetwork. This release represents four months of feature development and bug fixes. A short list of things to look out for in this release include: ARM support for honeypots “Personality” support for Dionaea (and an upgrade to 0.8) Persistence of custom scripts via […]
Is Sharing Caring?
My three year old knows to say “sharing is caring” when his older brother is playing with a toy he wants. Sometimes it works, often it doesn’t; thankfully, sharing threat intelligence data works differently. Once the mechanism for sharing is established, it’s essentially free to share, and no one has to give up their “toy”. […]
A Quick Adventure in AWS
The Friday before Labor Day, I went through the exercise of setting up a new CHN instance; the server on a local VCL-like Ubunutu 18 image, and cowrie and dionaea honeypots in each of three EC2 regions (Sydney, Singapore, Sao Paulo), and one cowrie honeypot in the same VCL IP space, for a total of […]
