Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Parse cowrie honeypot logs into a neo4j database

Ansible project to set up cowie, a ssh honeypot, and extract auth tries and established session information.

Provides at-a-glance info from the Cowrie honeypot JSON logs

Openproxy型ハニーポット

Ansible configuration for Cowrie. This is work in progress for Cowrie infrastructure

Voiphoney that Imulates D-Link DPH-150S VoIP phone and runs in docker container. It writes logs for Kibana in json and for human in log files. SIP Server - Python3, HTTP server - node.js, Telnet - cowrie, OSFooler - python2. Full size of image 512 Mb

check whether your server is a honeypot or not. this tool can be useful for this

A Cowrie SSH Honeypot Monitor and Logger

Publish actionable honeypot IOCs (IPs, URLs, hashes) from T-Pot into AlienVault OTX as Pulses. Runs on a separate VM with a persistent SSH tunnel to T-Pot’s Elasticsearch. Includes dedupe (no duplicate Pulses), configurable filters, and automated systemd timer publishing every 24h.

JNIC 2019 Challenge. Cowrie Honeypot Log Parser

A cloud-native honeypot system built using Cowrie on Amazon EC2, designed to attract, log, and analyze malicious behavior. Leveraging AWS services including S3, CloudWatch, Lambda, and DynamoDB.

Deception & Honeypot for Attack Profiling. Proof of Concept for the Network Security course of Free University of Brussels. MS Cybersecurity 24-25. Based on L. Spitzner's book; 'Honeypots: Tracking Hackers' (2002), applied to a SEA-based Virtual Private Server running Ubuntu. Grading: 90%

DEFpot is a real-time “Wall of Sheep” for hackers. It uses Cowrie to capture SSH login attempts, commands, and scan activity, and displays them live through a Flask web app.

MIP - a malware investigation framework for extracting IOCs from honeypots

cowrie w/ grafana + loki + alloy

Cowrie SSH/Telnet Honeypot