Comments on: Starting with Kippo (SSH Honeypot) http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/ Offensive and Defensive IT Security Thu, 02 Feb 2012 15:40:26 +0000 hourly 1 http://wordpress.com/ By: Andrew Waite http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-1091 Fri, 09 Dec 2011 14:17:10 +0000 http://blog.infosanity.co.uk/?p=754#comment-1091 Nice work, Ion. Thanks for sharing :)

]]> By: Ion http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-1089 Fri, 09 Dec 2011 13:58:35 +0000 http://blog.infosanity.co.uk/?p=754#comment-1089 Hello guys, I wrote two simple posts outlining the installation and configuration of Kippo, let me know what you think:

http://ikoniari.webpages.auth.gr/installing-kippo-ssh-honeypot-on-ubuntu.html
http://ikoniari.webpages.auth.gr/logging-kippo-events-using-mysql-db.html

]]> By: Kippo – pass.db « Infosanity's Blog http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-865 Mon, 20 Jun 2011 18:34:51 +0000 http://blog.infosanity.co.uk/?p=754#comment-865 [...] (For those new here, Kippo is a medium interaction honeypot emulating an SSH daemon, get started here). So I started trying to investigate what was causing the [...]

]]> By: Reviewing Kippo Logs « Infosanity's Blog http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-847 Mon, 23 May 2011 09:30:43 +0000 http://blog.infosanity.co.uk/?p=754#comment-847 [...] I first started running Kippo almost a year ago I had no difficulty getting motivated to log into the honeypot, check for new connections and [...]

]]> By: 2010: A Review « Infosanity's Blog http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-726 Fri, 31 Dec 2010 14:03:08 +0000 http://blog.infosanity.co.uk/?p=754#comment-726 [...] this InfoSanity has setup (and in some cases also removed) instances of honeyd, Dionaea, Amun and Kippo. These systems have also resulted in some new utilities being developed and released as I worked [...]

]]> By: Kippo is Cool | honey.fack.org http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-493 Thu, 08 Jul 2010 11:31:21 +0000 http://blog.infosanity.co.uk/?p=754#comment-493 [...] Command from another Kippo blog post. [...]

]]> By: Andrew Waite http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-492 Thu, 08 Jul 2010 11:12:09 +0000 http://blog.infosanity.co.uk/?p=754#comment-492 Oops, was convinced I had linked to the home page. My mistake, now rectified.

Cheers

]]> By: Andrew http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-491 Thu, 08 Jul 2010 10:58:55 +0000 http://blog.infosanity.co.uk/?p=754#comment-491 A link to kippo would be nice :)

]]> By: Andrew Waite http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-490 Wed, 07 Jul 2010 18:53:40 +0000 http://blog.infosanity.co.uk/?p=754#comment-490 Thanks Najmi,

I had intended to mention my install is behind a NAT (oops), completely slipped my mind. Thanks for filling in the gaps :D

]]> By: doncicuto http://blog.infosanity.co.uk/2010/07/06/starting-with-kippo/#comment-489 Wed, 07 Jul 2010 16:40:31 +0000 http://blog.infosanity.co.uk/?p=754#comment-489 Great post Andrew! Just be patient and you’ll start to log “interesting” ssh sessions :-D

]]>