TFTP Honey Pot Results

jrockway an hour ago | parent | next [-]

I like the prompt injection attempt on the footer:

This reminds me of Slashdot commenters back in the day that tried to include words like "bomb" in their signatures in the hopes of flagging some government system. I am glad that people haven't gotten tired of this sort of tomfoolery and have adapted it for a modern world :)

▲

forty an hour ago | parent [-]

If I'm not mistaken, it's not a prompt injection attempt, but a training data pollution, in order to prepare for a prompt injection later :) great idea

	▲	jrockway an hour ago \| parent [-]
		You're right. Fable 5 did not enjoy this question, but no doubt future models will.

▲

ceving 36 minutes ago | parent | prev | next [-]

Most evil is China: https://github.com/ceving/hostile/blob/main/TOP20.md

▲

vivi_ 2 hours ago | parent | prev | next [-]

I love investigating internet background radiation, this is interesting research. I've definitely seen spa504g.cfg (IP Phone) and spa112.cfg (Cisco analog terminal adapter) before; you should actually serve these a proper config file and spin up a disposable SIP server so you can (potentially) call them on the phone, send them a fax or even better ATDT ;)

Though, come to think of it these requests are more likely from credential harvesting bots as most ITSP's provision their CPE with a <macaddr>.cfg or similar.

	▲	racnid an hour ago \| parent [-]
		The 00000000000.cfg stuck out to me too, because that's the default/base config name for polycom phones.

▲

bashtoni 2 hours ago | parent | prev | next [-]

I can't be the only one smiling at the mention of file_id.diz

▲

UI_at_80x24 an hour ago | parent [-]

Man, besides being slow; I really miss those days.

I could say I was "into computers" and it meant something. Eternal September ruined it.

	▲	BigTTYGothGF 40 minutes ago \| parent \| next [-]
		You just need more esoteric hobbies.
	▲	cyanydeez an hour ago \| parent \| prev [-]
		Eternal september is more of a concept than a real thing; you had to have seen that by now; almost everything gets ruined when there's no discriminating force.

▲

nubinetwork 3 hours ago | parent | prev | next [-]

50 packets a day is peanuts, I think the lowest ranking service group that I track is printers, and even that's around ~200 unique ips per day.

	▲	stackghost 2 hours ago \| parent [-]
		>peanuts No kidding. I have a few personal services running on Internet-facing servers and they get hammered 24/7. One of my projects is written in Rails and I had left the server on the default verbosity during development. It accumulated several GB of systemd/journald logs in a matter of weeks. 50 packets a day sounds like a dream.

▲

blcknight 2 hours ago | parent | prev [-]

I know tftp is still in wide use, I wonder if there's things out there looking for stuff that's less common like NNTP, finger servers, etc