Honeypot notes.
These are the IP addresses that have been attacking the honeypot I’ve been building recently.

Wazuh
Adding to raspberry PI
curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import && chmod 644 /usr/share/keyrings/wazuh.gpg
echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee -a /etc/apt/sources.list.d/wazuh.list
apt-get update
Clear MySql binlog files
PURGE BINARY LOGS BEFORE now();
Looking for a new position.
Yep, I’m now looking for a new position or I will be in the next couple of month, more details to follow.
Sysnology NAS
Recycle bin on a share not working.
Appears that if the permissions are broken on
/volume1/[Share Name]/@eaDir/@recycle
then the shares recycle bin will stop working from SMB.
Simple change the permissions of that folder to 777 and they should start working again.
Quake 3 in Full Screen on PI
quake3 +set cl_renderer opengl1 +set r_mode -1 +set r_customwidth 1280 +set r_customheight 720 +set r_fullscreen 1 +set cg_drawFPS 1
Updated Ubuntu/Debian update ansible script
---
- hosts: all
gather_facts: yes
become: yes
serial: 1
tasks:
- name: Perform a dist-upgrade.
ansible.builtin.apt:
upgrade: dist
update_cache: yes
- name: Check if a reboot is required.
ansible.builtin.stat:
path: /var/run/reboot-required
get_md5: no
register: reboot_required_file
- name: Reboot the server (if required).
ansible.builtin.reboot:
when: reboot_required_file.stat.exists == true
- name: Wait for Machine to come back online
local_action: wait_for
host={{ inventory_hostname }}
port=22
state=started
delay=65
when: reboot_required_file.stat.exists == true
- name: Remove dependencies that are no longer required.
ansible.builtin.apt:
autoremove: yes
~
The above is an improvement on the previous version, thanks to Jeff Geerling. This version checks to see if a reboot is required then waits for the server to come back online.