Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/prod_env_secrets.env. MITRE: T1567 ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/prod_env_secrets.env. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/azure_service_principal.json. MITR ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/azure_service_principal.json. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/access_token_registry.xml. MITRE: ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/access_token_registry.xml. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/jumpcloud_agent_install.sh. MITRE: ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/jumpcloud_agent_install.sh. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/gitlab_runner_register.toml. MITRE ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/gitlab_runner_register.toml. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/okta_admin_session.json. MITRE: T1 ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/okta_admin_session.json. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/datadog_api_key.yaml. MITRE: T1567 ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/datadog_api_key.yaml. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: credential_file_exfil on /downloads/gcp_service_account_key.json. MITR ...
show moreHoneypot interaction [EXFIL]: credential_file_exfil on /downloads/gcp_service_account_key.json. MITRE: T1567.002 (Exfiltration to Cloud Storage). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: data_exfil_probe on /downloads/screenshare_transcript.txt. MITRE: T104 ...
show moreHoneypot interaction [EXFIL]: data_exfil_probe on /downloads/screenshare_transcript.txt. MITRE: T1041 (Exfiltration Over C2 Channel). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: file_listing_probe on /downloads. MITRE: T1213 (Data from Information ...
show moreHoneypot interaction [EXFIL]: file_listing_probe on /downloads. MITRE: T1213 (Data from Information Repositories). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXPLOIT]: admin_panel_probe on /admin/login. MITRE: T1595 (Active Scanning). U ...
show moreHoneypot interaction [EXPLOIT]: admin_panel_probe on /admin/login. MITRE: T1595 (Active Scanning). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Honeypot interaction [EXFIL]: data_exfil_probe on /downloads/client_contract_SECTrace.pdf. MITRE: T1 ...
show moreHoneypot interaction [EXFIL]: data_exfil_probe on /downloads/client_contract_SECTrace.pdf. MITRE: T1041 (Exfiltration Over C2 Channel). UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1. Observed on sectrace.org honeypot surface โ automated scanner/attacker activity.
show less
Coordinated campaign CMP-1793465310-286: 3 IPs sharing an attack fingerprint (wordpress_install_prob ...
show moreCoordinated campaign CMP-1793465310-286: 3 IPs sharing an attack fingerprint (wordpress_install_probe). Observed on sectrace.org honeypot surface.
show less
Coordinated campaign CMP-1793465310-286: 3 IPs sharing an attack fingerprint (wordpress_install_prob ...
show moreCoordinated campaign CMP-1793465310-286: 3 IPs sharing an attack fingerprint (wordpress_install_probe). Observed on sectrace.org honeypot surface.
show less
Port ScanBrute-ForceBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.