garfieldwtf/cowrie
Multi Arc Cowrie Honeypot - Fork from cowrie/cowrie
357
This is the official repository for the Cowrie SSH and Telnet Honeypot Docker effort. It contains Dockerfiles that you can use to build Cowrie Docker images.
To run Cowrie in Docker locally with creating your own image, run
docker run -p 2222:2222/tcp cowrie/cowrie
Then run an SSH client to port 2222 to test it:
ssh -p 2222 root@localhost
Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker.
Note that you will need to install Docker.
Run the following command to build all the images:
$ make all
Cowrie in Docker is set up to use an 'etc' volume to store configuration
data. Create cowrie.cfg
inside the etc volume with the
following contents to enable Telnet in your Cowrie Honeypot in
Docker
[telnet]
enabled = yes
docker pull garfieldwtf/cowrie