| MIRE/C³ | https://mire.cc |
| The OpenCanary Experience | https://toce.ch |
| WillIGetPwned | https://willigetpwned.com |
| CISO.li | https://ciso.li |
| i.am.ciso.lee | https://about.ciso.li |
Most web scanners do not stop at the first error.
MIRE/C³ sits in front of the application stack, serves realistic decoys, slows repeat offenders, and turns noisy probing into telemetry.
540,886 trapped requests.
57,079 unique IPs.
8.4 GB of treacle served.
37.8 days of attacker effort converted into cost.
Every probe becomes delay, deception and signal.
RE: https://infosec.exchange/@SecuriLee/116554650506474404
I am going to try to add some live logging capability to this in the coming days 👍
The OpenCanary Experience has generated 187M events from Internet-facing honeypots.
Converted a talk into a live web format, updated with 30-day stats from 3 exposed hosts.
The Internet is extremely noisy and opportunistic. And dangerous ⚡️
Big thanks to @ThinkstCanary and @haroonmeer for OpenCanary.
I thought @haroonmeer might like my MIRE/C³ system, build on my learnings from OpenCanary (and my OpenCanary Experience).....
The Internet is an ugly place, we need to fight back....⚔️
www.mire.cc www.toce.ch https://cfd.mire.cc/cfdemo.html
I received this SMS from DHL EXPRESS SCHWEIZ.
My first thought was Smishing.
Interesting attributes are the mention of „Mikchkasten“ but the XXX and lack of gap between the text and Sendungsnummer (plus why was it not mentioned where XXX is?) also triggered my spamsenses.
@dhlexpress you have to do better because it is not spam. I got notifications via WhatsApp and email too. But this kind of message is shoddy rubbish.
France said: "We are surprised by this tweet. France has not changed its position since day one"
My PR to include MongoDB in @thinkstcanary OpenCanary got promoted to production...try it now
#cybersecurity #opencanary
Next stop a PR with more VNC passwords using externalised passwords lists 👍🏻
The MIRE/C³ now features enhanced error capture, allowing it to intercept a broader range of error conditions and handle them dynamically based on the configured mode.
With this improvement, the system expands its capability to shift from passive defence to active deception. When Neutral 404 mode is disabled, MIRE/C³ can more aggressively engage malicious traffic—fully embracing the principle: “Stop defending. Start deceiving.”
