Read the original article: Base64 Hashes Used in Web Scanning, (Sat, Apr 24th)
I have honeypot activity logs going back to May 2018 and I was curious what type of username:password combination was stored in the web traffic logs following either the Proxy-Authorization: Basic or Authorization: Basic in each logs. This graph illustrate an increase in web scanning activity for username:password over the past 3 years.
Read the original article: Base64 Hashes Used in Web Scanning, (Sat, Apr 24th)