Just a quick update to say I have added downloadable blacklists of IP address that have attacked the honeypots recently. You can download the blacklist in various formatted lists such as IPTables, Cisco ACL or just a plain old text file! Enjoy! http://honeypot.jayscott.co.uk/ip/blacklists/
Posts Tagged ‘ssh’
November 4, 2011
0
Kippo SVN update
By Jay in Honeypot, SecurityOver the last week there has been a very nice feature added to the Kippo SVN, the ability to interact with anyone connected to the honeypot via a telnet based session management interface! To get the new interactive telnet session follow these instructions: 1. Download the SVN version svn checkout http://kippo.googlecode.com/svn/trunk/ kippo Copy the example [...]
October 7, 2011
0
Changes Galore! A honeypot update
By Jay in HoneypotLoads of updates to the honeypot project and I have added another honeypot to the network! I always wanted to re-write the code because when I first create the site it was purely just a quickly coded page to display basic stats however I have had a lot of feedback for various improvements and ideas [...]
Tags: honeypot, Networking, Security, ssh
September 5, 2011
0
Caught in a Honeypot – The Analysis
By Jay in HoneypotSo I decided to have a look at they overall honeypot data for the last few months and write it up in a report on the findings. The report analysis the attacks by country, about the malware found and the outcome of reporting the IP address to the correct netblock owners. You can download the [...]
June 13, 2011
0
The Honeypot Grows!
By Jay in HoneypotAnother month and another round of updates for the honeypot site. I now report any attacks after 5 attempts or if they gain access to a honeypot. You can view all the IP address that have been report here i have also included the replies, if any. Finally added the ability to view the captured [...]
Tags: honeypot, Networking, Security, ssh