🔥Want to build t-pot honeypot on AWS? Find out in a few easy steps! 🔥

[@ROBERT-ml7ml]

Can you create a video and show how to attack your own honeypot with a kali machine, and show the threat logs?

[@mpcybersecurity]

Sounds good, i will try and get this planned soon

[@ROBERT-ml7ml]

@@mpcybersecurity how soon? I need this for a school project lol. What's your p@ypal? I can send $ for the quick effort!

[@TechEndeavor]

Nice video! how do i connect to the cockpit? my credentials i set up on installation dont work

[@mpcybersecurity]

github.com/telekom-security/tpotce review the documentation here mate, there some specific credentials that come as default

[@TechEndeavor]

@@mpcybersecurity consider me ignorant, but it only shows the username in the documentation

[@mpcybersecurity]

@@TechEndeavor try user: tsec pass: tsec that should be the default cockpit creds

[@Noughts]

@@mpcybersecurity This doesn't work. I think the ISO from the github repo needs to be used, this was brought up in a different thread where someone had this error and the author claimed it is because the official image wasn't used, and ive found out it is not so easy/possible to upload and use a custom iso. Would love a fix/update on this if u ever have time :)

[@kamomoreki2792]

Hey i did all the steps... whenever i type in my ip and port number i get a "This site cant be reached" however the homepage does pop up after like 20-30 refreshes...kabana on the other hand just says "This site cant be reached" not a single successful load

[@mpcybersecurity]

Yeah Kibana can be problematic, to get it solved. For me is the same, sometimes it works and sometimes it does not

[@SAWborg]

I’m experiencing the same issue. Have you found a solution yet?

[@adibhossain685]

Hey there can u help there is no active on my map on the top bar I can see attempts but nothing map activity 😊

[@mpcybersecurity]

But do you see any other items on the dashboards? The only reason could be that firewall is misconfigured

[@hugo_guzman]

check your network security settings and ensure you allow all UDP/TCP traffic

[@Momentum_animation]

Please, Wisdomm, whenever I try to connect to my instance with a command, it always tells me connection, timeout

[@mpcybersecurity]

@@Momentum_animation what do you try to connect with a command? Your instance is accessible through the browser

[@Momentum_animation]

@@mpcybersecurity I’m sorry if I confuse you it’s just that I’m new to this. My teacher just randomly give us the project based on this and I’ve never used it before so I’m getting used to it I’m talking about the part where you opened your command then you opened cmd on your system after you did cd downloads then you copied the ssh-I “keys” Command from your aws and then pasted it in your cmd ,yours said connection failed first then you tried it again then it worked 7:53

[@Momentum_animation]

But mine is saying connection Time out and even though I try it again later it still says connection time out

[@mpcybersecurity]

@ that means you have not configured firewall correctly on the VM

[@Momentum_animation]

@@mpcybersecurity i’ve tried troubleshooting almost everything possible yet still not working I don’t know what to do anymore :/

[@ChapalPuteh_]

TPOT only work with debian bullseye with support package right ?

[@mpcybersecurity]

yeah it only works with specific debian 11 image as mentioned in the video, i have tried a few other linux distros without success

[@larrybima7572]

I wasn't able to lunch my honeypot on the webpage using the IP address and port number. Pls what do I do?

[@mpcybersecurity]

How can i help with with the information you provided?

[@larrybima7572]

@@mpcybersecurity Thanks so much I figured it out and I would love it if you can do a video of how to attack honeypot

[@kamomoreki2792]

@@larrybima7572 Hey there i have the same issue, what did you do? Please

[@ninagee4511]

I keep getting that "Connection refused" error. I restarted VM and Instances. Nothing worked in order for me to log in to the server

[@mpcybersecurity]

Did you whitelist your IP address in the VM firewall?

[@ninagee4511]

@@mpcybersecurity How do I do that? I tried the vmware site but instructions aren't that clear

[@mpcybersecurity]

@@ninagee4511 vmware? What’s that got to do with AWS? You building the honeypot locally?

[@ninagee4511]

@mpcybersecurity negative. I'm signed in to AWS on my actual PC but I'm trying to deploy the honeypot with Ubuntu via VMWare

[@mpcybersecurity]

@@ninagee4511 you need to use correct image otherwise it will not work, then in AWS networking part you need to whitelist your public IP for 64000 ports so you can access the dashboard

[@alaaalotaibi6201]

How to save all the data you have collected? Also I did something that I tried to nmap the ip address from my machine and it got like 200 hits instantly.

[@mpcybersecurity]

There are a few things you can do, you can export the logs to somewhere like S3 bucket which will keep the costs down and access it from anywhere else for analysis

[@farhaanukadia7731]

Why cannot I log into the T-pot dashboard? I get site cannot be reached

[@mpcybersecurity]

You have be mindful how you set up the NSG rules, you have to make sure to whitelist your IP to specific dashboard port

[@toethegangsta]

400 Bad Request The plain HTTP request was sent to HTTPS port nginx