Skip to content
A simple and effective environment created to collect data from a honeypot (kippo, glastopf, etc.) and publish them online (php)
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
www
.gitignore
LICENSE
README.md
honeystats.cfg.dist
hs_functions.sh
mainstats.sh
slowquery.sh
wp-hs.sh

README.md

honeystats

A simple and effective environment created to collect data from honeypots (kippo, glastopf, etc.) and publish them online (php)

You can find a fresh install of the 'www' part of the framework here: http://nowhere.purificato.org:65000/

I'm currently use HoneyStats as part of my site: http://purificato.org/honeypot.php

INSTALL

  • cd /opt
  • git clone git://github.com/bunk3r/honeystats.git
  1. edit 'honeystats.cfg' with your needs (cp honeystats.cfg.dist to honeystats.cfg)
  2. copy 'www' content into your www-root apache directory (this is the site, change it as you want)
  3. launch 'mainstats.sh' and 'slowquery.sh' or
  4. edit your crontab as in the first lines of .sh files to keep your stats updated

NOTICE

you can automount with fuse a remote ftp/ssh server (e.g. your web hosting server) and use it with honeystats (you can edit the mountpoint in the .cfg and remove comments from FTP/SSH parts into the .sh files)

  • slowquery.sh - this is the file for the very slow queries (e.g. kippo passwords)
  • mainstats.sh - all other queries
  • wp-hs.sh - wordpress related attacks stats (only txt files, not yet included in www)

TO DO

  1. Integrate wp-sh (wordpress related attacks) into presentation
  2. Add graphic charts to the site
  3. Manage other queries (web attacks, list of wget commands, etc)
  4. Change layout presentation (www) to manage more tables with better look
  5. Optimize code and structure of the framework

MAYBE

  1. Add other presentation layouts (twitter bot?)
You can’t perform that action at this time.