What is DShield Docker
Open source security-oriented language for describing protocols and applying security policies on captured traffic.
This Docker Container Initiates an SSH Honeypot
This Docker container initiates an SSH honeypot, which is based on Cowrie, and activates the DShield output module. This module reports statistics to the SANS ISC DShield project. Building the image: # git clone https://github.com/xme/dshield-docker # cd dshield-docker # docker build -t dshield/honeypot . Running the image: First, create a configuration file that will store your DShield account details: # cat env.txt DSHIELD_UID=xxxxxxxxxx DSHIELD_APIKEY=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx DSHIELD_EMAIL=xxxxxxxxxxxxxxxxxxx Your credentials will be validated, and the honeypot will be configured correctly. Remember to register[1] if you do not already have an account. [1] https://www.dshield.org/register.html Boot the container: # docker run -d -p 2222:2222 --env-file=env.txt --restart=always --name dshield dshield/honeypot b56e526b6f7c9b6cb419245757b0586f73d7e99089fa93409f3626122990505a # docker logs dshield Validating provided credentials... API key verification succeeded! Starting cowrie.. Requirements: 1. Keep all technical terms and concepts exactly as they are. 2. Make the language clearer and more accessible. 3. Keep the same content structure and format. 4. Do not add or remove any information. 5. Maintain a similar length; if the content is very short, add a little more detail.
The honeypot is actively monitoring...
The honeypot is actively monitoring traffic on port.
DShield Docker Reviews
No reviews yet.
