securehoney.net Report : Visit Site

Technical data of the securehoney.net

Geo IP provides you such as latitude, longitude and ISP (Internet Service Provider) etc. informations. Our GeoIP service found where is host securehoney.net. Currently, hosted in United Kingdom and its service provider is Xilo Communications Ltd. .

sussex.ac.uk 

HTTP Header Analysis

HTTP Header information is a part of HTTP protocol that a user's browser sends to called LiteSpeed containing the details of what the browser wants and will accept back from the web server.

DNS

HtmlToText

-- secure honey -- ssh honeypot written in c home about blog stats code publications resources contact thank you monday 8th september 2014 11:12 wow, what an amazing way to end the final year project: securehoney.net went viral, the project won an award (left) from the british computer society and i've been offered a scholarship to study a cyber security phd. it's been nearly three months since the last blog post in which we looked at the android simplocker ransomware. i decided it would be a good idea to take some time off over the summer so i'm ready and energised for the next adventure which starts later this month. so what's been happening since the last blog post? quite a lot as it turns out... ... read more creating an antidote for android simplelocker ransomware tuesday 17th june 2014 10:09 in yesterday's blog post ( how to dissect android simplelocker ransomware ) we dissected the new android simplelocker ransomware. in this blog post we'll be creating an antidote for the ransomware to decrypt any files it encrypts. the process of creating the antidote is actually very simple because the ransomware comes with a built-in decrypt method and cipher password. this means we're able to create our own java class and copy the decryption code from the ransomware into our antidote class. so let's jump right in and start creating our antidote for simplelocker! ... read more how to dissect android simplelocker ransomware monday 16th june 2014 11:56 in this blog post we'll be looking at a new type of malware for android phones that encrypts important files and demands the user pay a ransom to regain access to their phone. this is the first reported case of ransomware being used on smartphones so i'm keen to find out more about this new malicious app. i want to understand what this ransomware does and how it restricts the phone user from accessing files on their sd card. i'll be providing a step-by-step dissection of the malware to provide a clear explanation of how this app carries out its malicious activities. so before we start the dissection let's look at exactly what simplelocker is and where it came from. ... read more how to dissect android flappy bird malware sunday 16th march 2014 16:34 coming up in this blog post: dissecting malicious version of flappy bird reveals premium rate sms message sent without user being aware. i'm at a point with the project where i'm diverging away from the honeypot for a moment to look at other sources of malware. i'm keen to see how android malware is put together and how to reverse engineer it to see what's going on under the hood. so in this blog post i'll be focusing on how to dissect one of the malicious versions of flappy bird. flappy bird first, a brief introduction and background on what flappy bird is. flappy bird is a game created by vietnamese developer dong nguyen and published by indie game producer .gears studios. dong nguyen released the game on 24th may 2013 and it suddenly became popular in early 2014. it's reported that the game was earning $50,000 per day from adverts which were displayed within the game. creator dong removed the game from apple and google on the 10th february 2014 after feeling guilty because the game was too addictive. having been removed from both both apple's app store and google play, various malicious versions of the app started to appear online to fill the gap. so it's one of these malicious version of flappy bird that i'll be dissecting in this blog post. ... read more trojan horse uploaded part 2: malware analysis thursday 6th february 2014 11:23 coming up in this blog post: trojan horse receives commands from a chinese c&c; server and sends ddos attacks to a malaysian online casino website. i'll be analysing the malware to determine what it does and also update you on the rest of the project as it's been a while since my last blog post. my last post was back on the 14th december 2013 and since then i've been buried in revision for exams in january, along with post-graduate applications and graduate scheme applications. this means there's not been a huge amount of progress on the project, but i'm aiming to get straight back into focusing on it now. i'm also eager to share some insights into the "disknyp" malware which came to light back in december. ... read more live stats ( see full stats ) attempted logins date range # attempts today 393 yesterday 194 past 7 days 4,426 past 30 days 17,357 all time 4,114,040 top 5 passwords password # attempts 123456 18,562 admin 8,503 password 6,536 - 6,393 root 4,833 top 5 usernames username # attempts root 3,927,129 admin 78,772 test 4,046 oracle 3,356 nagios 2,648 stats represent data collected from ssh login attempts on multiple honeypots. parts of some stats may be filtered to maintain anonymity. updated: tue, 07 jun 2016 16:33:48 +0000 popular posts how to dissect android flappy bird malware how to dissect android simplelocker ransomware creating an antidote for android simplelocker ransomware trojan horse uploaded part 2: malware analysis thank you recent posts thank you creating an antidote for android simplelocker ransomware how to dissect android simplelocker ransomware how to dissect android flappy bird malware trojan horse uploaded part 2: malware analysis live password cloud 12qwaszx 963852741 1234%^ poiuyt 12344321 zxcvbn 111 zaqxsw 888888 111111 asdfghjkl a123456 windows qwer1234 q1w2e3 passw0rd zxcv support 1111 server iloveyou welcome123 user !@ abcdef a cisco 123abc qwer qwerty123 q123456 manager 54321 alpine qq123456 huawei 11223344 password zaqxswcde qazwsx default 1 qwe123 test okokok 88888888 ubnt dragon 159753 147852369 12345678 passwd qwertyuiop 23456 power qwaszx huawei123 changeme123 123123123 5201314 aa123456 qwe 1qazxsw2 nagios redhat zaqxswcdevfr q1w2e3r4 1234qwer 1qaz2wsx3edc monitor 12345 pass root1234 password123 123qweasd 000000 z1x2c3v4 qaz qazwsx123 f**kyou admin123!@# pass123 121212 p@ssword 1a2s3d4f 1qaz2wsx admin123456 woaini zaq1xsw2 linux adminadmin _ system 1qaz@wsx p@ssw0rd1 sapp a1b2c3d4 654321 qazwsxedc 1234 sqlpp qazxsw asdf sysadmin qqpp abc123 idc2008 123123 666666 123456 123qwe 987654321 admin123 admin@123 zhang 789789 11111111 idcidc qwerty123456 secret huawei@123 !@#$%^ changeme 1q2w3e 147258369 superman 147258 admin1 mnbvcxz admin welcome 225588 !qaz1qaz 123 p0o9i8u7 apple aaa !qaz2wsx administrator zzzzzz oracle qwerty china 0000 rootpass 7890pp letmein abcd1234 1122334455 raspberry abc1234 a1s2d3f4 rootroot p@ssw0rd qwert public adminpp 1q2w3e4r5t root 1234567890 qweasd guest asdfgh test123 zxcvbnm caonima - !qaz@wsx 112233 147147 123654 q1w2e3r4t5 1234567 1q2w3e4r password1 root123 123456789 12345qwert qweasdzxc 110110 159357 tweets by @securehoney website designed and developed by simon bell all content © secure honey 2019.

URL analysis for securehoney.net

http://securehoney.net///blog/trojan-horse-uploaded-part-2-malware-analysis.html#title
http://securehoney.net///stats.html#top-usernames-all-time
http://securehoney.net///blog/how-to-dissect-android-simplelocker-ransomware.html#title
http://securehoney.net///blog/how-to-dissect-android-simplelocker-ransomware.html
http://securehoney.net///blog
http://securehoney.net///resources.html
http://securehoney.net///publications.html
http://securehoney.net///stats.html#top-password-all-time
http://securehoney.net///blog/how-to-dissect-android-flappy-bird-malware.html
http://securehoney.net
http://securehoney.net///blog/how-to-dissect-android-flappy-bird-malware.html#title
http://securehoney.net///blog/thank-you.html
http://securehoney.net///blog/thank-you.html#title
http://securehoney.net///blog/creating-an-antidote-for-android-simplelocker-ransomware.html
http://securehoney.net///feed

Whois Information

Whois is a protocol that is access to registering information. You can reach when the website was registered, when it will be expire, what is contact details of the site with the following informations. In a nutshell, it includes these informations;

Domain Name: SECUREHONEY.NET
Registry Domain ID: 1830455787_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2017-10-10T12:34:34Z
Creation Date: 2013-10-09T10:17:02Z
Registry Expiry Date: 2018-10-09T10:17:02Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS1.SPRUZZ.COM
Name Server: NS2.SPRUZZ.COM
Name Server: NS3.SPRUZZ.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-03-26T20:50:20Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

  REGISTRAR GoDaddy.com, LLC

SERVERS

  SERVER net.whois-servers.net

  ARGS domain =securehoney.net

  PORT 43

  TYPE domain

DOMAIN

  NAME securehoney.net

  CHANGED 2017-10-10

  CREATED 2013-10-09

STATUS
clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
clientRenewProhibited https://icann.org/epp#clientRenewProhibited
clientTransferProhibited https://icann.org/epp#clientTransferProhibited
clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited

NSERVER

  NS1.SPRUZZ.COM 193.150.34.40

  NS2.SPRUZZ.COM 91.230.181.40

  NS3.SPRUZZ.COM 95.215.175.40

  REGISTERED yes

Mistakes

The following list shows you to spelling mistakes possible of the internet users for the website searched .