cowrie VS tpotce

Thanks for the reference; after some link chasing I was able to end up on the project I believe you're thinking of: https://github.com/cowrie/cowrie#features (appears to be BSD-3-Clause: https://github.com/cowrie/cowrie/blob/master/LICENSE.rst )

Technically, yes, but it is quite difficult to perform a realistic emulation of an OS with shell facilities, as evidenced by all the system emulation on SSH honeypots e.g. cowrie[1].

[1] https://github.com/cowrie/cowrie/issues

In EU Law as long as you don't post full names you should be fine. There are honeypots for this purpose ready to deploy btw! Check out Cowrie. Best SSH honeypot I encountered so far.

Thanks for your opinion mate. I use Cowrie in connection with qemu aka my proxmox Here is the link 2 it: https://github.com/cowrie/cowrie

Source is from data collected using Cowrie Honeypot The tool for displaying the data is Splunk

It's currently a cowrie (https://github.com/cowrie/cowrie) with ssh and telnet. For my use case a low interaction in enough, maybe I'll code my own in the future.

I set up one of these a while back: https://github.com/cowrie/cowrie

Hey I’ve done some honeypot research if you’re wanting to explore that take a look at cowrie: https://github.com/cowrie/cowrie

Have a look at tpot created by Deutsche Telekom. https://github.com/telekom-security/tpotce

After installing proxmox, I created a VM on it containing t-pot, an (.iso) packaged group of containerized honeypots with a compelling aggregation of logs, attack attempts, a heatmap showing attack/scan locations, ips, and numerous other criteria logged and viewable in pretty elasticsearch dashboards.

The Data for https://www.sicherheitstacho.eu/start/main comes from their Honeypot Software https://github.com/telekom-security/tpotce

As for blue team, there is tpotce which is a fully integrated Linux distro that deploys multiple honeypot containers and connects them back up into Elastic Search, but you'd need a device with 8GB+ RAM facing the internet unrestricted in a DMZ or something similar - https://github.com/telekom-security/tpotce

T-Pot - The All In One Honeypot Platform - T-Pot

I use it to run Splunk at home for testing. You can also run honeypots or use TPot.

Check this https://github.com/telekom-security/tpotce

If you want a live threat map/Honeypot and get a feel for what's attacking your network while also looking amazing, set up the T-pot - https://github.com/telekom-security/tpotce