SSH Honey top 10 attacks

View the top 10 attack location on the SSH honeypot.

SSH Honey overall activity

View the most used usernames, passwords, most login attempts etc.

SSH Honey weekly reports

Weekly generated reports with all the statistics combined.

Saturday, November 30, 2013

Honey @ Your Service Sat Nov 30 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sat Nov 30 00:51:27 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-29 12:28:55 tcp 208.109.100.40 16587 80 27
2013-11-29 18:49:49 udp 17.173.255.223 16387 16403 20
2013-11-29 03:42:03 tcp 178.33.33.40 8000 26681 10
2013-11-29 18:49:51 udp 17.154.239.223 16387 16403 10

Honey @ Your Service Sat Nov 30 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used

Friday, November 29, 2013

Honey @ Your Service Fri Nov 29 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Fri Nov 29 00:51:23 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-28 17:07:50 tcp 5.135.4.17 4852 80 386
2013-11-28 05:31:03 udp 17.154.239.223 16387 16403 24
2013-11-28 18:03:33 udp 17.173.255.223 16387 16403 24
2013-11-28 00:02:07 tcp 5.34.247.152 1741 110 21

Honey @ Your Service Fri Nov 29 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.147.113.85 root 963963369 2013-11-28 13:10:57 2013-11-28 13:11:19 SSH-2.0-libssh2_1.4.2
61.147.113.85 root 963963369 2013-11-28 13:10:59 2013-11-28 13:11:25 SSH-2.0-libssh2_1.4.2
61.147.113.85 root admin 2013-11-28 13:10:57 2013-11-28 13:11:19 SSH-2.0-libssh2_1.4.2
61.147.113.85 root 123456 2013-11-28 13:10:57 2013-11-28 13:11:19 SSH-2.0-libssh2_1.4.2

Thursday, November 28, 2013

Honey @ Your Service Thu Nov 28 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Thu Nov 28 00:51:26 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-27 08:13:41 tcp 178.32.100.122 2106 80 904
2013-11-27 13:48:31 tcp 198.204.250.82 35443 80 161
2013-11-27 08:43:27 udp 77.221.130.41 20269 53 58
2013-11-27 21:10:13 udp 66.35.46.197 19686 33437 30

Honey @ Your Service Thu Nov 28 00:10:05 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
59.63.181.197 root 963963369 2013-11-27 13:30:27 2013-11-27 13:30:53 SSH-2.0-libssh2_1.4.2
59.63.181.197 root admin 2013-11-27 13:30:27 2013-11-27 13:30:53 SSH-2.0-libssh2_1.4.2
59.63.181.197 root 123456 2013-11-27 13:30:27 2013-11-27 13:30:53 SSH-2.0-libssh2_1.4.2
61.147.116.5 root 963963369 2013-11-27 16:00:17 2013-11-27 16:00:32 SSH-2.0-libssh2_1.4.2

Wednesday, November 27, 2013

Honey @ Your Service Wed Nov 27 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Wed Nov 27 00:51:26 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-26 14:54:29 tcp 195.211.221.18 80 3154 5049
2013-11-26 01:58:13 tcp 192.81.197.74 33613 110 25
2013-11-26 16:21:38 udp 17.173.255.223 16387 16403 24
2013-11-26 01:47:13 tcp 178.33.33.40 8000 9960 12

Honey @ Your Service Wed Nov 27 00:10:06 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.160.251.136 root 963963369 2013-11-26 17:21:45 2013-11-26 17:21:55 SSH-2.0-libssh2_1.4.2
61.160.251.136 root admin 2013-11-26 17:21:45 2013-11-26 17:21:55 SSH-2.0-libssh2_1.4.2
61.160.251.136 root root 2013-11-26 17:21:45 2013-11-26 17:21:55 SSH-2.0-libssh2_1.4.2

Tuesday, November 26, 2013

Honey @ Your Service Tue Nov 26 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Tue Nov 26 00:51:32 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-25 15:35:48 tcp 92.63.108.91 13658 80 34863
2013-11-25 14:13:10 tcp 188.120.240.186 19510 80 25394
2013-11-25 01:57:04 tcp 178.32.250.192 40193 21 8408
2013-11-25 00:01:04 tcp 74.115.206.101 47613 80 57

Honey @ Your Service Tue Nov 26 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.147.116.99 root root 2013-11-25 12:51:08 2013-11-25 12:51:30 SSH-2.0-OpenSSH_3.9p1

Monday, November 25, 2013

Honey @ Your Service Mon Nov 25 01:30:02 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Mon Nov 25 00:51:45 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-24 14:39:25 tcp 5.254.101.199 7723 80 39545
2013-11-24 15:47:35 tcp 5.135.143.86 7722 29257 20448
2013-11-24 14:04:10 tcp 178.32.100.122 9083 80 18505
2013-11-24 07:00:37 udp 17.173.255.223 16387 16403 62

Honey @ Your Service Mon Nov 25 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used

Sunday, November 24, 2013

Honey @ Your Service Sun Nov 24 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sun Nov 24 00:51:19 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-23 02:32:46 tcp 192.16.71.171 80 45582 29
2013-11-23 20:43:19 udp 66.35.46.197 13573 33437 20
2013-11-23 01:14:55 udp 17.173.255.223 16387 16403 20
2013-11-23 23:28:58 tcp 199.7.52.72 80 52247 17

Honey @ Your Service Sun Nov 24 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used

Saturday, November 23, 2013

Honey @ Your Service Sat Nov 23 01:30:04 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sat Nov 23 00:51:19 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-22 01:05:34 tcp 192.16.71.171 80 40568 37
2013-11-22 01:20:46 tcp 109.109.240.66 53600 80 19
2013-11-22 14:02:10 tcp 174.140.165.101 35122 5900 15
2013-11-22 07:30:21 tcp 2.16.94.239 80 56336 12

Honey @ Your Service Sat Nov 23 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.147.116.99 root root 2013-11-22 06:23:14 2013-11-22 06:23:38 SSH-2.0-OpenSSH_3.9p1
61.147.116.99 root root 2013-11-22 06:33:08 2013-11-22 06:33:28 SSH-2.0-OpenSSH_3.9p1
61.147.116.99 root root 2013-11-22 06:38:43 2013-11-22 06:39:07 SSH-2.0-OpenSSH_3.9p1
61.147.116.99 root root 2013-11-22 06:47:41 2013-11-22 06:48:01 SSH-2.0-OpenSSH_3.9p1

Friday, November 22, 2013

Honey @ Your Service Fri Nov 22 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Fri Nov 22 00:51:18 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-21 16:35:08 tcp 54.245.236.123 51028 80 51
2013-11-21 08:01:38 udp 17.154.239.223 16387 16403 32
2013-11-21 08:04:50 udp 115.230.124.3 53 16675 21
2013-11-21 08:01:38 udp 17.173.255.223 16387 16403 16

Honey @ Your Service Fri Nov 22 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
183.20.103.90 root root 2013-11-21 06:29:19 \N SSH-2.0-PuTTY_Release_0.63cn
61.147.116.99 root root 2013-11-21 07:17:11 2013-11-21 07:17:32 SSH-2.0-OpenSSH_3.9p1
61.147.116.99 root root 2013-11-21 07:29:38 2013-11-21 07:29:59 SSH-2.0-OpenSSH_3.9p1
183.20.103.90 root root 2013-11-21 14:13:54 \N SSH-2.0-PuTTY_Release_0.63cn

Thursday, November 21, 2013

Honey @ Your Service Thu Nov 21 01:30:02 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Thu Nov 21 00:51:20 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-20 12:03:49 tcp 54.204.199.93 59577 80 52
2013-11-20 20:20:22 tcp 14.161.34.86 44615 80 44
2013-11-20 18:19:46 udp 17.173.255.223 16387 16403 24
2013-11-20 19:07:14 tcp 17.164.1.22 443 54111 12

Honey @ Your Service Thu Nov 21 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.160.249.102 root 963963369 2013-11-20 17:51:08 2013-11-20 17:51:16 SSH-2.0-libssh2_1.4.2
61.160.249.102 root admin 2013-11-20 17:51:08 2013-11-20 17:51:16 SSH-2.0-libssh2_1.4.2
61.160.249.102 root root 2013-11-20 17:51:08 2013-11-20 17:51:16 SSH-2.0-libssh2_1.4.2
61.160.249.102 root 963963369 2013-11-20 17:51:09 2013-11-20 17:52:29 SSH-2.0-libssh2_1.4.2

Wednesday, November 20, 2013

HoneyPi up and running

Hi guys,

So got the honeypot sensors running on the Raspberry Pi.

After tweaking some of my scripts the whole system is fully operational again. So the automatic postings to this blog and Twitter are also up and running again (this time from the Pi). This means that the automated postings from the Kippo SSH honeypot and Honeyd IIS webserver are going to resume again.

Created a basic image for the honeypots, ready to use out of the box.
So if any of you readers know a quick way to clean up the distribution (traces of my internal network), please share!

Also working on getting Thug and Dionea running on the Pi.

Last thing, created a GeoRSS a couple of weeks ago from the IP's that connected to the SSH Honeypot. The GeoRSS feed is also going to be automatically updated every night again. You can find it here: http://goo.gl/maps/BTKCP

Soon more.

Cheers,

Honey @ Your Service Wed Nov 20 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Wed Nov 20 00:51:20 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-19 01:00:49 tcp 83.169.9.187 2714 3389 267
2013-11-19 16:55:36 udp 17.173.255.223 16387 57242 24
2013-11-19 17:23:08 tcp 17.158.28.48 443 50735 11
2013-11-19 10:59:46 tcp 93.120.27.62 9097 80 10

Honey @ Your Service Wed Nov 20 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
92.69.225.4 test test 2013-11-19 00:47:27 2013-11-19 00:48:42 SSH-2.0-libssh2_1.4.3

Tuesday, November 19, 2013

Honey @ Your Service Tue Nov 19 01:41:09 CET 2013: honey IIS connections\nContent-Type: text/html

Welcome to Honey @ Your Service.<br />
This posting contains the connections made to the IIS honeypot from yesterday.<br />
Have fun!<br /><br />
Cheers,<br /><br />
Honey<br />
Stay hungry, stay foolish<br />
<br />
<TABLE border=1 cellpadding=3 cellspacing=0 width=300>

<tr>
<td align=center>Date / time </td>
<td align=center>Protocol</td>
<td align=center>Source IP</td>
<td align=center>Source port</td>
<td align=center>Destination port</td>
<td align=center> Times connected</td>
</tr>


</table>
<TABLE border=1 cellpadding=3 cellspacing=0 width=300>

<tr>
<td align=center>Date / time </td>
<td align=center>Protocol</td>
<td align=center>Source IP</td>
<td align=center>Source port</td>
<td align=center>Destination port</td>
<td align=center> Times connected</td>
</tr>


<tr>
<td align=center>2013-11-18 11:31:27</td>
<td align=center>tcp</td>
<td align=center>83.169.9.187</td>
<td align=center>1338</td>
<td align=center>3389</td>
<td align=center>184</td>
</tr>
<tr>
<td align=center>2013-11-18 10:42:22</td>
<td align=center>tcp</td>
<td align=center>192.168.178.48</td>
<td align=center>62121</td>
<td align=center>80</td>
<td align=center>44</td>
</tr>
<tr>
<td align=center>2013-11-18 18:27:21</td>
<td align=center>udp</td>
<!--more-->
<td align=center>17.154.239.223</td>
<td align=center>16387</td>
<td align=center>16403</td>
<td align=center>16</td>
</tr>
<tr>
<td align=center>2013-11-18 18:27:21</td>
<td align=center>udp</td>
<td align=center>17.173.255.223</td>
<td align=center>16387</td>
<td align=center>50848</td>
<td align=center>8</td>
</tr>
<tr>
<td align=center>2013-11-18 12:17:46</td>
<td align=center>udp</td>
<td align=center>183.100.135.226</td>
<td align=center>44358</td>
<td align=center>15081</td>
<td align=center>7</td>
</tr>
<tr>
<td align=center>2013-11-18 10:55:44</td>
<td align=center>tcp</td>
<td align=center>82.217.31.147</td>
<td align=center>62327</td>
<td align=center>80</td>
<td align=center>4</td>
</tr>
<tr>
<td align=center>2013-11-18 14:05:49</td>
<td align=center>tcp</td>
<td align=center>83.110.18.72</td>
<td align=center>10095</td>
<td align=center>3389</td>
<td align=center>3</td>
</tr>
<tr>
<td align=center>2013-11-18 20:18:56</td>
<td align=center>tcp</td>
<td align=center>177.224.21.6</td>
<td align=center>4656</td>
<td align=center>5900</td>
<td align=center>2</td>
</tr>
<tr>
<td align=center>2013-11-18 11:31:30</td>
<td align=center>udp</td>
<td align=center>60.214.139.75</td>
<td align=center>53</td>
<td align=center>45281</td>
<td align=center>2</td>
</tr>
<tr>
<td align=center>2013-11-18 12:44:22</td>
<td align=center>tcp</td>
<td align=center>94.23.116.63</td>
<td align=center>7723</td>
<td align=center>20127</td>
<td align=center>2</td>
</tr>
<tr>
<td align=center>2013-11-18 19:54:47</td>
<td align=center>tcp</td>
<td align=center>95.100.136.93</td>
<td align=center>80</td>
<td align=center>56715</td>
<td align=center>2</td>
</tr>
<tr>
<td align=center>2013-11-18 11:50:42</td>
<td align=center>tcp</td>
<td align=center>198.15.106.186</td>
<td align=center>6000</td>
<td align=center>1521</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 21:11:42</td>
<td align=center>tcp</td>
<td align=center>14.17.35.181</td>
<td align=center>22206</td>
<td align=center>1723</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 15:07:48</td>
<td align=center>tcp</td>
<td align=center>37.187.39.105</td>
<td align=center>80</td>
<td align=center>14143</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:25:59</td>
<td align=center>tcp</td>
<td align=center>82.80.176.152</td>
<td align=center>2477</td>
<td align=center>23</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 22:37:53</td>
<td align=center>tcp</td>
<td align=center>54.205.123.52</td>
<td align=center>58176</td>
<td align=center>27017</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 11:20:59</td>
<td align=center>tcp</td>
<td align=center>2.16.106.224</td>
<td align=center>80</td>
<td align=center>52911</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 17:29:07</td>
<td align=center>tcp</td>
<td align=center>123.151.42.61</td>
<td align=center>12208</td>
<td align=center>8099</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:00:30</td>
<td align=center>udp</td>
<td align=center>188.138.41.34</td>
<td align=center>5141</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 21:20:42</td>
<td align=center>tcp</td>
<td align=center>121.56.217.208</td>
<td align=center>6000</td>
<td align=center>3128</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 15:18:25</td>
<td align=center>tcp</td>
<td align=center>192.157.246.60</td>
<td align=center>6000</td>
<td align=center>3389</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:36:22</td>
<td align=center>udp</td>
<td align=center>207.244.66.108</td>
<td align=center>58615</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 23:16:03</td>
<td align=center>tcp</td>
<td align=center>92.69.225.4</td>
<td align=center>9086</td>
<td align=center>80</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 20:32:02</td>
<td align=center>udp</td>
<td align=center>62.212.82.41</td>
<td align=center>5062</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 17:47:15</td>
<td align=center>udp</td>
<td align=center>188.138.33.215</td>
<td align=center>5289</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 14:23:27</td>
<td align=center>tcp</td>
<td align=center>198.27.85.102</td>
<td align=center>6005</td>
<td align=center>49375</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:02:41</td>
<td align=center>tcp</td>
<td align=center>171.91.159.189</td>
<td align=center>7766</td>
<td align=center>3389</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 21:29:38</td>
<td align=center>tcp</td>
<td align=center>196.37.207.242</td>
<td align=center>56630</td>
<td align=center>2083</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 10:43:48</td>
<td align=center>udp</td>
<td align=center>198.72.116.173</td>
<td align=center>5065</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 18:57:42</td>
<td align=center>tcp</td>
<td align=center>199.71.214.66</td>
<td align=center>49028</td>
<td align=center>80</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 15:23:51</td>
<td align=center>tcp</td>
<td align=center>221.139.182.110</td>
<td align=center>6000</td>
<td align=center>3389</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:39:50</td>
<td align=center>tcp</td>
<td align=center>82.75.54.85</td>
<td align=center>38106</td>
<td align=center>23</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 20:48:58</td>
<td align=center>tcp</td>
<td align=center>111.181.42.38</td>
<td align=center>43409</td>
<td align=center>23</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 18:10:11</td>
<td align=center>tcp</td>
<td align=center>94.102.63.245</td>
<td align=center>50162</td>
<td align=center>80</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 14:59:40</td>
<td align=center>tcp</td>
<td align=center>220.95.210.103</td>
<td align=center>57571</td>
<td align=center>3389</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 12:16:05</td>
<td align=center>tcp</td>
<td align=center>188.93.100.19</td>
<td align=center>80</td>
<td align=center>61089</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 22:06:14</td>
<td align=center>tcp</td>
<td align=center>93.174.88.32</td>
<td align=center>59406</td>
<td align=center>21320</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 19:51:57</td>
<td align=center>udp</td>
<td align=center>198.50.239.20</td>
<td align=center>5113</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 15:36:55</td>
<td align=center>udp</td>
<td align=center>188.138.41.214</td>
<td align=center>5083</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 11:31:54</td>
<td align=center>udp</td>
<td align=center>66.85.181.146</td>
<td align=center>5111</td>
<td align=center>5060</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 20:52:41</td>
<td align=center>tcp</td>
<td align=center>54.225.159.127</td>
<td align=center>80</td>
<td align=center>57903</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 18:12:52</td>
<td align=center>tcp</td>
<td align=center>82.80.180.134</td>
<td align=center>35708</td>
<td align=center>23</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 15:03:16</td>
<td align=center>tcp</td>
<td align=center>198.143.173.178</td>
<td align=center>35263</td>
<td align=center>443</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 22:34:25</td>
<td align=center>tcp</td>
<td align=center>77.108.80.123</td>
<td align=center>1659</td>
<td align=center>5631</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 10:56:20</td>
<td align=center>tcp</td>
<td align=center>182.50.130.120</td>
<td align=center>80</td>
<td align=center>40950</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 16:07:29</td>
<td align=center>tcp</td>
<td align=center>110.249.212.186</td>
<td align=center>10857</td>
<td align=center>5632</td>
<td align=center>1</td>
</tr>
<tr>
<td align=center>2013-11-18 13:05:51</td>
<td align=center>udp</td>
<td align=center>64.236.64.139</td>
<td align=center>57026</td>
<td align=center>53</td>
<td align=center>1</td>
</tr>
</table>

Honey @ Your Service Tue Nov 19 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Tue Nov 19 00:51:26 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected

Honey @ Your Service Tue Nov 19 00:10:03 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used

Monday, November 18, 2013

Honey @ Your Service Mon Nov 18 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Mon Nov 18 00:51:16 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected

Honey @ Your Service Mon Nov 18 00:10:06 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used

Sunday, November 17, 2013

Honey @ Your Service Sun Nov 17 11:57:40 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sun Nov 17 11:32:22 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
Date / time Protocol Source IP Source port Destination port Times connected

-e Honey @ Your Service Sun Nov 17 11:30:38 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
192.168.178.11 honeydrive test 2013-11-16 14:29:55 2013-11-16 14:30:15 SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1
192.168.178.11 honeydrive test 2013-11-16 14:29:55 2013-11-16 14:30:15 SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1
192.168.178.11 honeydrive root 2013-11-16 14:29:55 2013-11-16 14:30:15 SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1
192.168.178.11 honeydrive root 2013-11-16 14:29:55 2013-11-16 14:30:15 SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.1

Honey @ Your Service Sun Nov 17 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Friday, November 15, 2013

Honey @ Your Service Fri Nov 15 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Fri Nov 15 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-14 00:10:48 udp 17.173.254.223 16387 16403 432
2013-11-14 13:26:27 tcp 58.61.218.58 1044 1433 131
2013-11-14 09:17:10 tcp 188.9.169.80 1343 3389 66
2013-11-14 01:30:54 tcp 177.103.187.40 51305 3389 46

Honey @ Your Service Fri Nov 15 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
221.11.64.118 root ASTA-NU-ESTE-BUN 2013-11-14 03:16:02 2013-11-14 03:16:10 SSH-2.0-libssh-0.1
221.11.64.118 root !@#$%^ 2013-11-14 03:16:11 2013-11-14 03:16:15 SSH-2.0-libssh-0.1
221.11.64.118 root ^%$#@! 2013-11-14 03:16:18 2013-11-14 03:16:25 SSH-2.0-libssh-0.1
58.215.43.234 root muiema 2013-11-14 04:00:01 2013-11-14 04:00:04 SSH-2.0-libssh-0.1

Thursday, November 14, 2013

Honey @ Your Service Thu Nov 14 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Thu Nov 14 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-13 18:15:03 udp 17.173.254.223 16387 16403 579
2013-11-13 15:52:05 udp 83.81.144.30 62406 12567 37
2013-11-13 08:11:22 tcp 188.9.169.80 2673 3389 31
2013-11-13 00:20:38 tcp 123.151.149.222 45429 11010 30

Honey @ Your Service Thu Nov 14 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
211.236.246.12 root DUP 2013-11-13 00:28:08 2013-11-13 00:28:11 SSH-2.0-libssh-0.1
211.236.246.12 DUP ro0t 2013-11-13 00:28:12 2013-11-13 00:28:16 SSH-2.0-libssh-0.1
211.236.246.12 root [realmadrid] 2013-11-13 00:28:16 2013-11-13 00:28:20 SSH-2.0-libssh-0.1
211.236.246.12 root Kii76ghagtnbhA 2013-11-13 00:28:20 2013-11-13 00:28:25 SSH-2.0-libssh-0.1

Wednesday, November 13, 2013

Honey @ Your Service Wed Nov 13 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Wed Nov 13 00:51:02 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-12 20:59:18 tcp 94.209.84.15 50944 5800 569
2013-11-12 13:55:28 tcp 202.51.231.232 1160 1024 320
2013-11-12 09:18:52 udp 17.154.239.223 16387 16403 37
2013-11-12 01:46:34 tcp 111.42.0.251 3900 18080 35

Honey @ Your Service Wed Nov 13 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
108.59.9.101 root 1234567890 2013-11-12 12:16:11 2013-11-12 12:16:13 SSH-2.0-libssh-0.1
108.59.9.101 root qwertyuiop 2013-11-12 12:16:13 2013-11-12 12:16:14 SSH-2.0-libssh-0.1
108.59.9.101 root zxcvbnm 2013-11-12 12:16:14 2013-11-12 12:16:16 SSH-2.0-libssh-0.1
108.59.9.101 root poiuytrewq 2013-11-12 12:16:16 2013-11-12 12:16:18 SSH-2.0-libssh-0.1

Tuesday, November 12, 2013

Honeypot sensors to Raspberry Pi

Hi guys,

Just a quick note.

It's Pi mania here! After setting up the CIC News engine on a Raspberry Pi I'm now working on the honeypots.

Installed the honeypot software Kippo, Honeyd and my additional scripts onto a Raspberry Pi (a HoneyPi!). I'm in proces of copying the collected data (for statistics) from my server to the HoneyPi so the generated charts have the input data since the sensors are running. After the import I can run the honey sensors on the HoneyPi.

I need to test the functionality in the next couple of days and set-up the automatic blog postings on the HoneyPi. This means that the daily statistics and the realtime SSH honey overview can be offline during the next couple of days.

Also written installation instructions for Kippo and Honeyd (almost got Thug working again) onto a Pi, will publish the instructions in the next couple of days.

Cheers,


Honey @ Your Service Tue Nov 12 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Tue Nov 12 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-11 06:36:30 tcp 211.100.42.2 17105 8443 906
2013-11-11 00:50:48 tcp 78.111.93.107 58506 80 125
2013-11-11 06:10:26 tcp 201.190.33.74 4081 110 118
2013-11-11 03:51:50 tcp 174.79.175.150 12552 3389 86

Honey @ Your Service Tue Nov 12 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
216.117.136.196 root root 2013-11-11 01:17:34 2013-11-11 01:17:41 SSH-2.0-libssh-0.1
106.186.28.28 root nuebun 2013-11-11 09:19:07 2013-11-11 09:19:11 SSH-2.0-libssh-0.1
106.186.28.28 root 123456 2013-11-11 09:19:12 2013-11-11 09:19:21 SSH-2.0-libssh-0.1
222.33.62.178 ftp ftp 2013-11-11 14:21:34 2013-11-11 14:21:37 SSH-2.0-libssh-0.1

Monday, November 11, 2013

Honey @ Your Service Mon Nov 11 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Mon Nov 11 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-10 11:15:12 udp 83.81.144.30 61741 12567 68
2013-11-10 08:10:20 tcp 216.187.159.22 59056 3389 42
2013-11-10 00:24:05 tcp 95.64.37.10 80 34004 16
2013-11-10 11:42:19 tcp 185.25.48.54 53390 5900 11

Honey @ Your Service Mon Nov 11 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
46.165.205.228 info info 2013-11-10 01:19:17 2013-11-10 01:19:18 SSH-2.0-libssh-0.1
46.165.205.228 support support 2013-11-10 01:19:18 2013-11-10 01:19:19 SSH-2.0-libssh-0.1
46.165.205.228 guest guest 2013-11-10 01:19:19 2013-11-10 01:19:20 SSH-2.0-libssh-0.1
46.165.205.228 test test 2013-11-10 01:19:20 2013-11-10 01:19:30 SSH-2.0-libssh-0.1

Sunday, November 10, 2013

Honey @ Your Service Sun Nov 10 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sun Nov 10 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-09 01:01:00 udp 218.66.171.4 53 41556 229
2013-11-09 11:40:07 udp 85.25.15.210 5101 5061 39
2013-11-09 12:14:24 tcp 198.245.63.161 48200 80 31
2013-11-09 14:51:34 tcp 212.227.250.244 50850 3389 25

Honey @ Your Service Sun Nov 10 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.142.106.34 nobody universalpassword 2013-11-09 07:38:53 2013-11-09 07:38:58 SSH-2.0-libssh-0.1
202.162.221.220 root 1234567 2013-11-09 16:49:56 2013-11-09 16:50:07 SSH-2.0-libssh-0.1
176.31.160.2 root PWLA-ROOT 2013-11-09 16:50:34 2013-11-09 16:50:36 SSH-2.0-libssh-0.1
176.31.160.2 root bcCdDiklmnNoprstuv 2013-11-09 16:50:36 2013-11-09 16:50:37 SSH-2.0-libssh-0.1

Saturday, November 9, 2013

Honey @ Your Service Sat Nov 9 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Sat Nov 9 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-08 00:08:19 tcp 192.237.166.37 62675 3389 95
2013-11-08 00:07:42 udp 82.139.77.236 30243 12567 59
2013-11-08 08:53:22 tcp 85.25.132.63 6005 3072 45
2013-11-08 12:36:28 udp 85.25.15.210 5152 5061 39

Honey @ Your Service Sat Nov 9 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
61.147.103.87 root %NULL% 2013-11-08 04:03:13 2013-11-08 04:03:57 SSH-2.0-libssh2_1.4.0
61.147.103.87 root %null% 2013-11-08 04:03:13 2013-11-08 04:03:57 SSH-2.0-libssh2_1.4.0
61.147.103.87 root %username% 2013-11-08 04:03:13 2013-11-08 04:03:57 SSH-2.0-libssh2_1.4.0
61.147.103.87 root 123.com 2013-11-08 04:03:13 2013-11-08 04:03:57 SSH-2.0-libssh2_1.4.0

Friday, November 8, 2013

Honey @ Your Service Fri Nov 8 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Fri Nov 8 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-07 11:26:48 tcp 192.237.166.37 50535 3389 198
2013-11-07 00:06:48 udp 82.139.77.236 30243 12567 112
2013-11-07 14:40:52 tcp 200.85.60.138 4919 110 36
2013-11-07 02:47:22 tcp 177.6.125.165 63161 5900 22

Honey @ Your Service Fri Nov 8 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
42.112.16.118 lihan 7734416.+- 2013-11-07 15:54:09 2013-11-07 15:54:12 SSH-2.0-libssh-0.1
42.112.16.118 root redhat 2013-11-07 15:54:12 2013-11-07 15:54:16 SSH-2.0-libssh-0.1
42.112.16.118 root qwerty1234 2013-11-07 15:54:16 2013-11-07 15:54:19 SSH-2.0-libssh-0.1
42.112.16.118 ghost 2164823977newpass123 2013-11-07 15:54:19 2013-11-07 15:54:22 SSH-2.0-libssh-0.1

Thursday, November 7, 2013

Honey @ Your Service Thu Nov 7 01:30:01 CET 2013: Honey SSH Graph overview

Welcome to Honey @ Your Service.
This posting contains the overview from the SSH honeypot. The statistics are updated on a daily basis.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish


Honey @ Your Service Thu Nov 7 00:51:03 CET 2013: honey IIS connections

Welcome to Honey @ Your Service.
This posting contains the connections made to the IIS honeypot from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Date / time Protocol Source IP Source port Destination port Times connected
2013-11-06 00:05:17 udp 84.29.1.30 30243 12567 103
2013-11-06 00:05:35 udp 77.251.217.15 23498 12567 59
2013-11-06 16:44:58 udp 82.139.77.236 30243 12567 52
2013-11-06 18:56:19 udp 157.55.235.147 40012 12567 45

Honey @ Your Service Thu Nov 7 00:10:01 CET 2013: honey SSH logins

Welcome to Honey @ Your Service.
This posting contains the tried SSH honeypot logins from yesterday.
Have fun!

Cheers,

Honey
Stay hungry, stay foolish

Source IP Tried username Tried password Start time End time SSH client used
202.98.100.37 root wcpz664fa2o4 2013-11-06 00:49:53 2013-11-06 00:49:56 SSH-2.0-libssh-0.1
202.98.100.37 root pinguinasdh 2013-11-06 00:49:57 2013-11-06 00:50:00 SSH-2.0-libssh-0.1
202.98.100.37 root bufusimata 2013-11-06 00:50:00 2013-11-06 00:50:06 SSH-2.0-libssh-0.1
202.98.100.37 root 1qazxsw2 2013-11-06 00:50:06 2013-11-06 00:50:16 SSH-2.0-libssh-0.1
 

Blogger news

This website is under construction.

About

This website is part of the Christiaan008 Honey project.