Linux honeypots

# www.fduran.com
# Linux honeypots

# nephentes
# (google 'nephentes honepot')
apt-get update; apt-get install nepenthes
nano /etc/nepenthes/nepenthes.conf
/etc/init.d/nepenthes restart
#log: less /var/log/nepenthes.log

# kippo
# http://code.google.com/p/kippo/
wget http://kippo.googlecode.com/files/kippo-0.4.tar.gz
tar zxvf kippo-0.4.tar.gz
cd kippo-0.4
cp kippo.cfg.dist kippo.cfg
nano kippo.cfg
useradd user
passwd user
su user
mkdir /home/kippo
chown user:user /home/kippo
cd ..
mv kippo-read-only /home/kippo/
chown -R user:user /home/kippo/
iptables -t nat -I PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222
# (save to rc.local too)
# logs:
less /home/kippo/kippo-read-only/log/kippo.log
ls -l /home/kippo/kippo-read-only/log/tty/