https://github.com/sierrasoftworks/honeypot

A service designed to track malicious SSH login attempts
https://github.com/sierrasoftworks/honeypot

honeypot security ssh-server

Last synced: 13 days ago
JSON representation

A service designed to track malicious SSH login attempts

• Host: GitHub
• URL: https://github.com/sierrasoftworks/honeypot
• Owner: SierraSoftworks
• Created: 2020-05-16T17:24:38.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2024-12-12T14:46:43.000Z (21 days ago)
• Last Synced: 2024-12-12T15:37:53.396Z (21 days ago)
• Topics: honeypot, security, ssh-server
• Language: Go
• Homepage: https://honeypot.sierrasoftworks.com/api/v1/stats
• Size: 184 KB
• Stars: 6
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Honeypot

**A honeypot framework designed to measure drive-by internet attacks**

This project contains a lightweight Go service designed to act as a honeypot

for various drive-by internet attacks on common protocols. It is designed to

make adding new protocols extremely easy, while keeping track of various

indicators of an attack.

## Supported Protocols

| Protocol   | Port  | Emulation   |

|------------|-------|-------------|

| SSH        | 22    | Full        |

| Telnet     | 23    | Full        |

| HTTP       | 80    | Full        |

| Redis      | 6379  | Full        |

| RDP        | 3369  | Basic (TCP) |

| VNC        | 5900  | Basic (TCP) |

| MongoDB    | 27017 | Basic (TCP) |

| PostgreSQL | 5432  | Basic (TCP) |

| MySQL      | 3306  | Basic (TCP) |

## Deployment

This project can be deployed using Kubernetes. To do so, you should do the

following:

```bash

kubectl create namespace honeypot-demo

kubectl apply --namespace honeypot-demo \

    -f https://raw.githubusercontent.com/SierraSoftworks/honeypot/master/.deploy/deployment.yml \

    -f https://raw.githubusercontent.com/SierraSoftworks/honeypot/master/.deploy/service.yml

```

This will deploy the latest version of the honeypot on your Kubernetes cluster and expose it

using a dedicated Service (`type: LoadBalancer`). It will also create a new service called

`honeypot-server` which hosts the API on its `http` port. To access this, you can create an

ingress or use `kubectl proxy`.