kippo-graph

by ikoniaris

ikoniaris /kippo-graph

Visualize statistics from a Kippo SSH honeypot

129 Stars 52 Forks Last release: about 5 years ago (1.5.1) Other 255 Commits 9 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

Kippo-Graph

Kippo-Graph is a full featured script to visualize statistics for a Kippo based SSH honeypot.

It uses the Libchart PHP chart drawing library by Jean-Marc Trémeaux, QGoogleVisualizationAPI PHP Wrapper for Google's Visualization API by Thomas Schäfer, RedBeanPHP library by Gabor de Mooij, MaxMind and geoPlugin geolocation technology.

REQUIREMENTS:

  1. PHP version 5.3.4 or higher.
  2. The following packages: libapache2-mod-php5, php5-mysql, php5-gd, php5-curl.

On Ubuntu/Debian:

apt-get update && apt-get install -y libapache2-mod-php5 php5-mysql php5-gd php5-curl

/etc/init.d/apache2 restart

QUICK INSTALLATION:

wget http://bruteforce.gr/wp-content/uploads/kippo-graph-VERSION.tar.gz

mv kippo-graph-VERSION.tar.gz /var/www/html

cd /var/www/html

tar zxvf kippo-graph-VERSION.tar.gz

mv kippo-graph-VERSION kippo-graph

cd kippo-graph

chmod 777 generated-graphs

cp config.php.dist config.php

nano config.php #enter the appropriate values

Browse to http://your-server/kippo-graph to view or generate the honeypot charts and statistics.

Note 1: If you choose to disable

REALTIME_STATS
in your config.php file it is advisable to setup a cron job to update the charts in the background. The recommended way to do that is to add the following line in your crontab with
crontab -e
(make sure to change the kippo-graph path if it's different):

@hourly cd /var/www/html/kippo-graph && php kippo-graph.php > /dev/null 2>&1

Note 2: If you want to use the Kippo-Scanner component you will have to allow Kippo-Graph's .htaccess file to take effect. You can do this by editing your Apache configuration file at /etc/apache2/apache2.conf and changing

AllowOverride None
to
AllowOverride All
for the /var/www/ Directory (only).

Note 3: To fully use the geolocation features (Intensity Map) you will need to give CREATE TEMPORARY TABLES rights to your MySQL database user (most likely it has already been done).

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.