Distributed/community honeypot – the Internet Storm Center's DShield Honeypot Project
First, get the current date and time from your host. Any activity that's heavily dependent on logs needs accurate time:
# date Fri 16 Jul 2021 03:00:38 PM EDT
If your date/time is off or isn't configured reliably, you'll want to fix that before you start – this is true of almost any service in any operating system.
Now, change to an installation directory, then download the app using git
. If you don't have git
, use the standard sudo apt-get install git
that we've used throughout this book to get it. Once git
is installed, this command will create a dshield
directory under the current working directory:
git clone https://github.com/DShield-ISC/dshield.git
Next, run the install
script:
cd dshield/bin sudo ./install.sh
Along the way, there will be several input screens. We'll cover some of the key ones here:
- First, we have...