RE: https://infosec.exchange/@catsalad/117235640529809686
I rememebr the early early days of automated threat intel, when a F500 corp auto loaded indicators into block lists by appending the hosts file. Lo and behold, 127.0.0.1 showed as an indicator as the adversary pinged it to make sure networking was up.
This was a thing that happened.
Eddie.
npub14r…ky6tw
2026-09-08 13:32:31 UTC
Author Public Key
npub14reehva7ut24cfet5rz2j0mgcnj73j947dh0dzg5r8u3c7pqe64q6ky6twSeen on
wss://relay.momostr.pinkPublished at
2026-09-08 13:32:31 UTCEvent JSON
{
"id": "cf2eed018d893d302bd04e1c2a858f2304fd6af1d7911fba4a2827c5fb7142e7",
"pubkey": "a8f39bb3bee2d55c272ba0c4a93f68c4e5e8c8b5f36ef6891419f91c7820ceaa",
"created_at": 1788874351,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@infoseclogger/117235669472580629",
"web"
],
[
"proxy",
"https://infosec.exchange/users/infoseclogger/statuses/117235669472580629",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/infoseclogger/statuses/117235669472580629",
"pink.momostr"
],
[
"-"
]
],
"content": "RE: https://infosec.exchange/@catsalad/117235640529809686\n\nI rememebr the early early days of automated threat intel, when a F500 corp auto loaded indicators into block lists by appending the hosts file. Lo and behold, 127.0.0.1 showed as an indicator as the adversary pinged it to make sure networking was up.\n\nThis was a thing that happened.",
"sig": "2aa66536d304a71de184420dd7649bf499151b0282a346e8b133ca412959a08e42d490a263876b18bf5b17f8c7348f41f22a8ac5fc2f8d519f22f1b7eaac859f"
}