@arbs09.de

Today I was in Leipzig, Germany and I took some photoes, take a look!

On the 31. of October I shot some amazing night sky pictures. Take a look!

I Found something realy interesting, a ADB Honeypot. I installed it one one of my servers via Docker. Than I waited for 24h. Findings after 24h After 24h i logged back into my server and locked at the log data of the honeypot. If you want to take a look: adbhoney.log I analysed the data and here are my findings. Table of connections ID IP Country ASN Connections Tot Time (s) Avg Time (s) Max Time (s) 1 103.205.XXX.XXX VN AS149137 1 45.3 45.3 45.3 2 157.10.XXX.XXX VN AS150862 3 136.2 45.4 45.5 3 198.235.XXX.XXX BE AS396982 2 0 0 0 4 139.59.XXX.XXX IN AS14061 6 2732.2 455.4 748 5 45.200.XXX.XXX NL AS50580 5 5.1 1 1 6 154.213.XXX.XXX DE AS51396 3 136.1 45.4 45.6 7 154.213.XXX.XXX DE AS51396 5 228.2 45.6 46 8 35.203.XXX.XXX GB AS396982 1 182.5 182.5 182.5 9 104.167.XXX.XXX US AS399045 5 228.3 45.7 45.8 10 115.231.XXX.XXX CN AS58461 1 20.9 20.9 20.9 11 172.169.XXX.XXX US AS8075 1 160 160 160 12 167.94.XXX.XXX DE AS398705 4 12.7 3.2 9.1 13 212.64.XXX.XXX TR AS197450 1 45.9 45.9 45.9 Analysis A total of 13 unique IPs contacted my honeypot. The first connection lasted 1h 38min and came from Vietnam. The attacker tried to download and run a script in the temp folder (/data/local/tmp/). I ran the script on virustotal and it says that the script is malware. Only 30 minutes later a new connection came from Vietnam. It also tried to download a script, but it also wanted to kill some processes based on CPU usage. The 3rd just connected and did nothing else, 2 times. The 4th IP came from India and connected 6 times but also never really did anything. The next IP came from the Netherlands and did not send anything. The next 2 IPs came from Germany and tried to download malware to my honeypot 3 times. The 8. IP came from the UK just connected and did nothing. ...

Requirements You need a Linux Server / Computer with Docker installed. Installation of Portainer on Ubuntu using Docker Creating a volume sudo docker volume create portainer_data This is where Portainer will store the data. Creating the Container sudo docker run -d -p 8000:8000 -p 9443:9443 --name portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce:latest This created a instance of Portainer CE as a Docker Container. Setting Portainer up First you got to ...

Here is a photo dump of my trip to Denmark. It took a lot of pictures here you can see some of my favorite photos I took. 29.09.2024 30.09.2024 Koppenhagen (01.10.2024) Here you can see a photo of some boats in a canal in Kopenhagen. 02.10.2024 ...

What even is Pihole? Pi-hole is a network-level ad blocker that acts as a DNS sinkhole. It blocks ads and trackers across your entire network by intercepting DNS requests for known ad-serving domains. Why do I even need a Pihole? There are several reasons you might want to use Pi-hole: Network-wide ad blocking: It blocks ads on all devices, including those that don’t support ad-blockers (like smart TVs or mobile apps). Privacy: It reduces tracking by blocking known tracker domains. Performance: Devices may run faster without loading resource-heavy ads. What are we doing? Setting up pihole on a Raspberry Pi with dietpi What are the requirements? a Raspberry Pi 4 (or 3 or 5, but in this tutorials i will be using the RPI 4) set up with dietpi Getting you Pi setup with pihole on dietpi After installing dietpi you ssh into your pi. First run ...

Bilder