HoneyField App

Honeypot for your form inputs, provides security and analytics at the app / form field level.

[HoneyField App @honeyfield]

Detected 584 distinct IP's connecting to http://t.co/WxxrUimk. 3 of the top 5 look liked pwned servers or attack boxes.

[Michael T Minella @michaelminella]

@honeyfield An interesting piece of analysis would be a reverse mapping from traffic/logs/etc to possible exploits being executed...

[HoneyField App @honeyfield]

Seeing requests for wp-property/readme.txt. Maybe related to http://t.co/kd1vgEzy. Good stuff. This one running from AWS.

[HoneyField App @honeyfield]

Nothing to see here: "option=com_s5clanroster&controller=../../../../../../../../../../../../../../../../../../../proc/self/environ000&"

[Michael A. Davis @MrMichaelADavis]

@honeyfield @ebellis use google two-factor for wordpress. http://t.co/MJ1KgaCx

[HoneyField App @honeyfield]

Also see a post for "storecart/readme.txt" from Ukraine. Looks like a check to see if wpStoreCart plugin is running. http://t.co/nDKq1Omz

[HoneyField App @honeyfield]

Seeing more password brute forcing. I guess take away is if you're running wordpress, assume somebody is going to try admin / dictionary.

[HoneyField App @honeyfield]

HoneyField is live with basic functions now. Improving dashboard, adding security events, but need some wordpress / php beta folks...

[HoneyField App @honeyfield]

Seeing cool results. Packaging and getting ready to run in the wild. Let us know if you run php, rails or java and want to give it a spin.

[HoneyField App @honeyfield]

Day 1 HoneyField result: surprising number of visits from http://t.co/Gwb8qqhJ and http://t.co/1uM4QjaP.

[HoneyField App @honeyfield]

Excellent progress here with wordpress plugin working and honeyfield server consuming events. More testing, then need some beta users!

[HoneyField App @honeyfield]

The first milestone of #honeyfield is complete. One more to go and it will be ready for a limited alpha - hopefully in the next few weeks!

[HoneyField App @honeyfield]

Excited to announce the start of work on honeyfield.io - a developer oriented library/service, allowing devs to secure and track abuse.