Vultr - another reliable alternative for SEA Virtual Private Server!

[nepenthes] Emulating physical nodes

Since the higher number of sensor we get, the huge coverage of outbreak we can cover, so I opt to choose the Neil's and his pal way of doing things:

for i in `seq 230 254`;do ip addr add X.X.X.$i/24 brd + dev eth0;done

This of course just cover the range of X.X.X.230 until X.X.X.254 .

Still finding method to simulate say 10,000 nodes since IPv6 address will be fine. Nobody really use ipv6 here, I guess.

Run, ip add show

You should see things similar like this:

1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: mtu 1500 qdisc pfifo_fast qlen 1000

inet X.X.X.139/24 brd X.X.X.255 scope global eth0
inet X.X.X.230/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.231/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.232/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.233/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.234/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.235/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.236/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.237/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.238/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.239/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.240/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.241/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.242/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.243/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.244/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.245/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.246/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.247/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.248/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.249/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.250/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.251/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.252/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.253/24 brd X.X.X.255 scope global secondary eth0
inet X.X.X.254/24 brd X.X.X.255 scope global secondary eth0

IPs obfuscated for anonimity

You should able to see this host "alive" given you scan from the other node. I did scan using Windows Nmap via my lappie to the honeypot sensors.