Super User
Super User

Questions tagged [honeypot]

14 questions
64
votes
2 answers

What do you do if you are being hacked by something coming from a supposedly legitimate IP address such as from Google?

Earlier today I was prompted to use a CAPTCHA — because of suspicious search activity — when doing a Google search, So I assumed either a PC on my network had a virus or something. After poking around I noticed — from my router logs—that there were…
Grady Player
  • 776
  • 1
  • 5
  • 11
1
vote
0 answers

Setting up a honey-pot on own PC

Even though honey pots are set up on isolated machines, is there a way to configure a honey pot on a normal PC with Windows 7 installed? I am studying the heuristic capabilities of various anti-malware engines to learn how effective they are in a…
RPK
  • 2,813
1
vote
1 answer

Safety of Proxy Servers

I've been looking around for proxy servers that I may possibly use (to mask my IP; privacy; etc), but all of the sites I find on Google seem to have at least one bad WOT scorecard rating out of a few (the standard "Green/Yellow/Red" ratings are fine…
Mateen Ulhaq
  • 3,728
1
vote
0 answers

Dependency issues with Ubuntu16.04 setting up honeypot

I am working on a project for an educational course. I am trying to set up a Cowrie honeypot on an Ubuntu 16.04 VM. I have followed the instructions from this site https://cowrie.readthedocs.io/en/latest/INSTALL.html. The first of which is to…
Q-cifer
  • 11
1
vote
1 answer

Linux Port Forwarding Recording Origin IP Address

I am working on setting up some ICS honeypots for research so I need to be able to record the origin IP address of traffic I recieve. I'm running the servers myself on prem but am behind a CGNAT/Double NAT on a 4G connection. I have set up port…
DaveM
  • 13
1
vote
1 answer

configure: error: "libevent is too old - you need to install a newer version"

I get Honeyd package from github and read instructions for installing it. I installed all dependencies, but when I try to ./configure, I get this error: configure: error: "libevent is too old - you need to install a newer version. Check…
Richard
  • 117
1
vote
0 answers

Honeynet setup and testing

I am setting up honeynet system with two honeypots and honeywall roo cdrom on vmware workstation 12. Now honeypots are not pinging to each other or honeywall is unable to ping to honeypots. In honeywall i am getting error "send msg operation not…
Naveen H
  • 11
0
votes
0 answers

SSH Honeypot: pros/cons?

My aim is to improve the security of my Raspberry Pi. The server needs to be open to the world through SSH, and I have already taken the usual measures to beef up the SSH security: primarily, fail2ban and non-standard port. I am debating the use of…
Figaro
  • 111
0
votes
2 answers

iptables redirect blocked IPs from one chain to a honeypot

I am currently using psad to automatically block potentially harmful IPs. When it detects an attack it adds the ip to PSAD_BLOCKED_INPUT or PSAD_BLOCK_OUTPUT and then drops all further traffic from this source. So far so good, but what I want is to…
Marcos Valle
  • 1
0
votes
3 answers

ESXi + pfsense traffic segregation

I'm kind of new to setting up networking with ESXi and working with pfsense, so please excuse if this cannot be done or I'm asking something the wrong way. I'm using ESXi 5.5.0 and I want to host some honeypots on my network that are accessible to…
Chiggins
  • 399
0
votes
1 answer

Is my router/network compromised?

I have a ZTE (F670L) router for my home network. Since past few days, I have been observing SSL certificate error (NET::ERR_CERT_AUTHORITY_INVALID), occurring abruptly more frequently than before. This initially started happening with Firefox…
asabhish
  • 1
0
votes
0 answers

Are there solutions to boot to a hidden OS only when special usb key is present?

My laptop was stolen recently. Unfortunately I did not take the time to install a honeypot on it. With my new laptop I am thinking about installing a honeypot OS and a hidden OS that I will use for my actual computing. I would like to achieve that…
adam_sasiadek
  • 1
0
votes
1 answer

Django HoneyPot Change Password Issue

I would appreciate if you could give me any clue! As I don't have experience in this, probably I've misunderstood smth. I'm using honeypot, more specifically honeypot.middleware.HoneypotMiddleware with HONEYPOT_FIELD_NAME in my API (settings.py). …
user1082173
  • 1
0
votes
1 answer

Setting MAC address of honeyd template fails

I am trying to set the MAC address of one of my honeyd templates, but keep getting an error message that complaints that that there is no interface that can reach the IP address I want to bind to. This is what I have in my honeyd.conf file: route…
arne.z
  • 133