Skip to content

Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.

License

Notifications You must be signed in to change notification settings

khulnasoft-lab/cyberpot-attack-map

 
 

CyberPot Attack Map

This fork of the GeoIP Attack Map was adjusted for CyberPot, also introducing new features (i.e. dynamic destination IPs to represent CyberPots), better performance for the Attack Map Server by using aiohttp, asyncio and aioredis and, where possible, serving the dependencies locally instead from different CDNs.

CyberPot Attack Map Visualization

This geoip attack map visualizer was forked and adjusted to display CyberPot Honeypot events in real time. The data server connects to elasticsearch, parses out source IP, destination IP, source port, destination port, timestamp, honeypot type and honeypot statistics (events per last 1m, 1h, 1d). Protocols are determined via common ports, and the visualizations vary in color based on protocol type while keeping stats regarding top source IPs and countries.

img.png

Credits

The original attack map was created by Matthew Clark May.
First CyberPot based fork was released by Eddie4.

Licenses / Copyright

Bootstrap, D3, Flagpack, JQuery, Leaflet, OpenStreetMap.

About

Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Packages

No packages published

Languages

  • JavaScript 36.2%
  • CSS 26.3%
  • Python 22.4%
  • HTML 15.1%