Skip to content

SSH-Winnie is a Node.js SSH honeypot to register data about connections attempts

License

Notifications You must be signed in to change notification settings

Xstoudi/ssh-winnie

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

85 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

SSH-Winnie

a Node.js SSH honeypot to register data about connections attempts

GitHub workflow status Docker image size GitHub issues GitHub pull requests License

📜 Features

  • Record login attempts on PostgreSQL database
  • Dashboard to display basic informations about collected samples, including username, password, autonomous system name, country
  • Export attempts to CSV
  • Able to centralize datas from multiple honeypot hosts
  • Report remote IP to AbuseIPDB

🚧 Requirements

🛫 Getting started

Just pull the docker image and run it with appropriate environment variables as described below, either by command line or using docker compose.

⚙️ Configuration

Winnie must be configured using environment variables:

SSH_HOST=0.0.0.0
SSH_PORT=3555
HOST=0.0.0.0
PORT=3333
NODE_ENV=production
APP_KEY=
DRIVE_DISK=local
DB_CONNECTION=pg
PG_HOST=
PG_PORT=
PG_USER=
PG_PASSWORD=
PG_DB_NAME=
CACHE_VIEWS=false
WINNIE_NAME=
ENABLE_DASHBOARD=           # don't set if you want to setup ssh honeypot only
ABUSEIP_API_KEY=            # remove if you don't want to report the attempts

📷 Screenshots

image image

✨ Contributors

All Contributors

Thanks goes to these wonderful people (emoji key):


Xavier Stouder

💻

Adriel

🎨

This project follows the all-contributors specification. Contributions of any kind welcome!