A lightweight intrusion detector for Home Assistant
See INSTALL.md for installation instructions. By default only a Telnet Honeypot is enabled, for more advanced detections see Docs.md
Setup dedicated monitoring scopes for your home IOT devices and track their DNS usage.
- Alert when IoT devices contact new domains
- Optional Alert when IoT devices contact new hosts
- Optional blocks, return
NXDOMAIN
for unusual requests
Additional log-in detections for your home network!
- Telnet Honeypot enabled by default
- Optional HTTP (NAS Web Page) HoneyPot
- Optional FTP HoneyPot
Here are some of the things you can do in the config, an admin web page is provided for monitoring.
- Integrate with Home Assistant Webhooks to send external notifications
- Tune learning to suit your needs, default 30 days DNS observation
- Inject Custom DNS A responses
- Custom upstream DNS resolvers
Thank you world of Open-Source, this project would be nowhere without you. Notable mentions...
- Michael Irigoyen for the Logo (Material Design Icon)
- Paul for publishing dnslib
- OpenCanary
- Mark Otto and team for Bootstrap
- 文翼 (wenzhixin) for bootstrap-table
- Stefan Haack for bootstrap-auto-darkmode
- ...and anyone else who contributed to the python libraries installed from
requirements.txt
😉