Playing with Honeypots

Summary For a few months I’ve had a basic Azure Linux box with SSH open to the world to collect the usernames brute forced and the IP address of the bot trying. This worked OK for a while but I was only taking the username and nothing else, plus it was slightly risky if the attacker ever guessed a username or password. What I really wanted to see was the Username and Password that was being used....

April 19, 2022 · 3 min · Tom Kinnaird