search

tbiens / icarus

SMTP&SNMP&SMB honeypot
GNU General Public License v3.0
54 stars 6 forks source link

port variable is wrong on tcp/445 #4

Closed trentwiles closed 3 years ago

trentwiles commented 3 years ago

On scans to tcp/445 the port variable returns 20445 Screenshot_20210926-183339_DuckDuckGo

tbiens commented 3 years ago

Hello,

Good catch, that makes sense. Inside the docker the app runs as just a user, therefore can't run on ports <1024. Instead I create a docker NAT that makes 445 the public port. Thus breaking the reporting that I recently added.

I pushed a fix, it'll look at a dictionary of the nats and pick the real port.

Testing shows:

11 seconds ago 212.253.195.20 triggered Icarus honeypot on port 445. Check us out on github.

a simple git pull in the folder and you should be up and running. Thanks for reporting the bug!