SSH Honeypot to catch them all
1.8K
This SSH Honeypot is based on the work from https://github.com/droberson/ssh-honeypot and https://github.com/random-robbie/docker-ssh-honey.
The image size is around 8MB.
REPOSITORY TAG IMAGE ID CREATED SIZE
giftkugel/ssh-honeypot latest 3f9d9bdc6ff1 15 minutes ago 7.92MB
Change the Port of your SSH server from 22 to something else.
Maybe you need to start the docker container as root or a privileged user to bind port 22.
docker run -it -p 22:22 giftkugel/ssh-honeypot:latest
The logs are written to stdout and /var/log/ssh-honeypot.log.
Mount the file as volume to keep it outside the Docker container.
The logs will look like
[Sat Mar 14 21:14:38 2020] ssh-honeypot 0.1.0 by Daniel Roberson started on port 22. PID 6
[Sat Mar 14 21:14:48 2020] Session: SSH-2.0-MoTTY_Release_0.36|SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.4|(null)|aes256-ctr|aes256-ctr|hmac-sha2-256|hmac-sha2-256
[Sat Mar 14 21:14:51 2020] 172.17.0.1 test 12345
[Sat Mar 14 21:14:53 2020] 172.17.0.1 test test
[Sat Mar 14 21:14:54 2020] 172.17.0.1 test god
[Sat Mar 14 21:14:56 2020] 172.17.0.1 test awesome
Content type
Image
Digest
Size
3.2 MB
Last updated
about 5 years ago
docker pull giftkugel/ssh-honeypot