We just released a significant update to our web honeypot. If you are running it, please update (and make sure automatic updates are enabled).
If you are not running the honeypot yet, here is how to get started:
- you will need Apache and PHP (should work on Windows, but we do most of our testing on Linux)
- log in to "My ISC"/"My DShield" https://isc.sans.org/myisc.html
- The "Latest honeypot version" link will link to the honeypot. Download it
The 'docs' directory includes a sample apache configuration (honeypot.dshield.org.conf). You will need to adjust the directory.
Please let me know if you are running into any issues, and THANKS a lot for your help. The data will be publicly available to anybody interested in helping us analyze the data.
Intrusion Detection In-Depth - SANS Boston Summer 2019
Oct 26th 2009
9 years ago