https://github.com/texasbe2trill/shodanr
An interactive visualization of ransomware infections worldwide using data from the Shodan API. Built with R using ggplot2 and plotly, this project maps infected hosts.
https://github.com/texasbe2trill/shodanr
cybersecurity data-science data-visualization ggplot2 httr2 internet-of-things iot plotly r ransomware shodan shodan-api statistics threat-intelligence world-map
Last synced: 7 months ago
JSON representation
An interactive visualization of ransomware infections worldwide using data from the Shodan API. Built with R using ggplot2 and plotly, this project maps infected hosts.
- Host: GitHub
- URL: https://github.com/texasbe2trill/shodanr
- Owner: texasbe2trill
- License: mit
- Created: 2025-02-03T17:48:53.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-02-11T02:29:55.000Z (over 1 year ago)
- Last Synced: 2025-10-23T01:58:50.884Z (7 months ago)
- Topics: cybersecurity, data-science, data-visualization, ggplot2, httr2, internet-of-things, iot, plotly, r, ransomware, shodan, shodan-api, statistics, threat-intelligence, world-map
- Language: R
- Homepage: https://texasbe2trill.github.io/ShodanR/
- Size: 5.68 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ShodanR
## Overview
This project analyzes ransomware infections using data retrieved from the **Shodan API**. It visualizes infected hosts on an interactive world map using `ggplot2` and `plotly`.
## Features
- **Shodan API Integration**: Fetches live data on ransomware-infected hosts.
- **Interactive Map**: Uses `ggplot2` and `plotly` for a dynamic geographic display.
- **Secure API Key Handling**: Hides API credentials using environment variables.
## Setup Instructions
### 1. Install `renv` (if not already installed)
Before activating the lock file, ensure you have the `renv` package installed:
``` r
install.packages("renv")
library(renv) # Loads the renv package
renv::restore() # Install exact packages used during development
```
### 2. Store API Key Securely
Add your **Shodan API key** to the `.Renviron` file to avoid exposing it in your code:
1\. Open `.Renviron`: `file.edit("~/.Renviron")`
2\. Add your API key: `SHODAN_API_KEY=your_api_key_here`
3\. Save and restart R.
4\. Access it securely in R: `api_key <- Sys.getenv("SHODAN_API_KEY")`
## Data
### Ransomware Data
`shodan_ransomware.csv` contains data on ransomware-infected devices retrieved from the Shodan API.
### Data Dictionary
| Column Name | Description |
|----------------------|-----------------------------------------------|
| **IP Address** | The IP address of the device. |
| **Port** | The port number being used. |
| **Transport** | The transport protocol used (e.g., TCP, UDP). |
| **Service** | The name of the service running on the port. |
| **Operating System** | The operating system running on the device. |
| **Country** | The country where the device is located. |
| **Country Code** | The ISO 3166 country code. |
| **City** | The city where the device is located. |
| **Longitude** | The geographic longitude of the device. |
| **Latitude** | The geographic latitude of the device. |
| **Ransom Letter** | The ransom letter found in the data. |
## Future Improvements
- [ ] Automate periodic data fetching for time-series analysis.
- [ ] Implement machine learning models to predict ransomware outbreaks.
- [ ] Enhance visualization with additional geospatial insights.
- [ ] Add more API query examples
## License
This project is open-source under the **MIT License**.
## Author
Chris Campbell - [GitHub](https://github.com/texasbe2trill)