You Too? "Unusual Activity with Double Base64 Encoding"

Published: 2019-11-03
Last Updated: 2019-11-03 22:09:21 UTC
by Didier Stevens (Version: 1)
1 comment(s)

Last week, Guy wrote a diary entry "Unusual Activity with Double Base64 Encoding" describing unusual scanning activity he sees on his honeypot.

I too see this activity on my honeypots (port 8080). Exactly the same. The very first hit is almost a year ago: December 30th 2018.

FYI: I'm using a simple honeypot I developed in Python.

Please post a comment if you see this activity too.

Didier Stevens
Senior handler
Microsoft MVP

Keywords: honeypot scanning
1 comment(s)


Diary Archives