SSH-Winnie

a Node.js SSH honeypot to register data about connections attempts

📜 Features

• Record login attempts on PostgreSQL database
• Dashboard to display basic informations about collected samples, including username, password, autonomous system name, country
• Export attempts to CSV
• Able to centralize datas from multiple honeypot hosts
• Report remote IP to AbuseIPDB

🚧 Requirements

• Node.js LTS 16.x or higher
• PostgreSQL 14.x

🛫 Getting started

Just pull the docker image and run it with appropriate environment variables as described below, either by command line or using docker compose.

⚙️ Configuration

Winnie must be configured using environment variables:

SSH_HOST=0.0.0.0
SSH_PORT=3555
HOST=0.0.0.0
PORT=3333
NODE_ENV=production
APP_KEY=
DRIVE_DISK=local
DB_CONNECTION=pg
PG_HOST=
PG_PORT=
PG_USER=
PG_PASSWORD=
PG_DB_NAME=
CACHE_VIEWS=false
WINNIE_NAME=
ENABLE_DASHBOARD=           # don't set if you want to setup ssh honeypot only
ABUSEIP_API_KEY=            # remove if you don't want to report the attempts

📷 Screenshots

✨ Contributors

Thanks goes to these wonderful people (emoji key):

Xavier Stouder 💻

Adriel 🎨

This project follows the all-contributors specification. Contributions of any kind welcome!