Last Updated: 2019-11-03 22:09:21 UTC
by Didier Stevens (Version: 1)
Last week, Guy wrote a diary entry "Unusual Activity with Double Base64 Encoding" describing unusual scanning activity he sees on his honeypot.
I too see this activity on my honeypots (port 8080). Exactly the same. The very first hit is almost a year ago: December 30th 2018.
FYI: I'm using a simple honeypot I developed in Python.
Please post a comment if you see this activity too.