optiwariindia/ssh-honeypot repository overview

⁠SSH Honeypot

⁠Introduction

This project is created to prevent intruders from ssh service related attacks. In vps hosting or cloud hosting, generally it is observed that the ssh service gets a higher degree of attacks. The honeypot can be used to misguide the attacker by providing a fake area to attack.

⁠How it works

It runs on port 22, i.e. default port of ssh service. Any attacker comming to port 22 shall be transferred to this service and shall be prompted for the password, i,e, an expected behaviour of the ssh service, while the password for the any user into the container is not set resulting wrong password message.

⁠How to setup

• Change default port for your sshd service by editing /etc/ssh/sshd_config and add port (other than 22)
• Install docker and run this container and expose port 22

⁠Install with docker compose

services:
  honeypot:
    image: optiwariindia/ssh-honeypot
    ports:
      - 22:22