Submitted by mig5 on Thu, 25/08/2011 - 17:00
I don't get a lot of Kippo honeypot hits these days, but every now and then one comes along.
Even more rarely do I get one like this, where the script kiddie is more stupid than anything I could possibly have predicted...
To the kiddies out there:
Not sure why ls'ing the same directory a good 10 times is expected to deliver different results.
Typing a program's name multiple times also doesn't magically install it in between those attempts either.
Pretty sure 'net users' doesn't work on Linux either.
Submitted by mig5 on Sun, 17/07/2011 - 00:17
I've built a basic kippo Debian package and dropped it into my personal Debian repository, http://debian.mig5.net .
If you're not aware, Kippo is an SSH honeypot written in Python (using Twisted). Read more at http://code.google.com/p/kippo/
It's pretty basic to install by hand, but I wanted to build some systems to install Kippo automatically using Puppet, so I wrote a deb.
Disclaimer!
----------------
Submitted by mig5 on Fri, 09/07/2010 - 15:15
Two of my favourite (so far) non-bot script kiddie attacks against my Kippo SSH honeypot.
