So on one of the honeypots it’s running a downloaded (malware) binary. Both were patched, so new vuln.
It’s being sprayed and prayed. One of the honeypots doesn’t even have a valid SSL certificate as I let it expire.
#PitScaler
Kevin Beaumont
npub1lc…6lcye
2026-10-02 19:19:31 UTC
in reply to nevent1q…760u
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2026-10-02 19:19:31 UTCEvent JSON
{
"id": "2f6c0488415bbc19e60df4c0bbd74f921785d332b67fb1984fa0232fdf5aa1d7",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1790968771,
"kind": 1,
"tags": [
[
"t",
"pitscaler"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/117372929427365765",
"web"
],
[
"e",
"23f22e25375736fdb37fe805511e7be087d26e5f2f9d2320672616893bad2bf1",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"6ede2e441a1b86f72a120e7cee78d8127fb6eb57b258cc8ab936fbc2d56b439e",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"3507f6c32f8d7e3edbe5570ad3340a49a863d9b75fadd3622d6f6bc5372a2af3"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/117372929427365765",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/117372929427365765",
"pink.momostr"
],
[
"-"
]
],
"content": "So on one of the honeypots it’s running a downloaded (malware) binary. Both were patched, so new vuln. \n\nIt’s being sprayed and prayed. One of the honeypots doesn’t even have a valid SSL certificate as I let it expire. \n\n#PitScaler",
"sig": "80abd5f4354ae5bd6f3a5014e6fa8e3edbb054f992d4acb45c73243514073095f91b5f7c6db7612153764b60c8aa659570630ea1a5c38a8c1c8ec74a4b110ac7"
}