Domain Name Used as Password Captured by DShield Sensor, (Sun, Oct 15th)

While reviewing my DShield honeypot logs, I noticed for the first time something strange in my list of Top Username & Password where several domain name were use as password. Initially, I was under the impression this might be a parsing error by Logstash and decided to review the raw logs to make sure it was parsed correctly to confirm data integrity. Since username and passwords isn’t something submitted to DShield, I reviewed my own raw logs to confirm the …

amp domain domain name dshield error honeypot list logs logstash name parsing password review sensor under username