Title

Patterns and patter - An investigation into ssh activity using Kippo honeypots

Document Type

Conference Proceeding

Publisher

Edith Cowan University

Faculty

Faculty of Health, Engineering and Science

School

ECU Security Research Institute

RAS ID

16136

Comments

This article was originally published as: Valli C., Rabadia P., Woodward A. (2014). Patterns and patter - An investigation into ssh activity using Kippo honeypots. Proceedings of the 11th Australian Digital Forensics Conference, ADF 2013. (pp. 141-149).Edith Cowan University. Original article available here

Abstract

This is an investigation of the activity detected on three honeypots that utilise the Kippo SSH honeypot system on VPS servers all on the same C class address. The systems ran on identical software bases and hardware configurations. The results are over the period 21st March 2013 until Tuesday 04 June 2013. The initial analysis covered in this paper examines behaviours and patterns detected of the attacking entities. The attack patterns were not consistent and there was large disparity in numbers and magnitude of attacks on all hosts. Some of these issues are explored in the paper.

Share

 
COinS