cowrie-ssh

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Malware written in bash to serve as an initial dropper script that will provide a strong foothold on the target device via reverse shells and persistence techniques, can be set to run via user interaction or coupled with a bot.

SSH honeypot with real-time attack visualization and threat analysis.

Kubernetes for Cowrie

A Cowrie SSH Honeypot Monitor and Logger

SSH honeypot (Cowrie) exposed for 6 days on a Google Cloud VM: 9143 sessions from 440 IPs analysed, static teardown of a Go miner dropped as "sshd", and the resulting IOCs. Write-up in English and French.

🛡️A machine learning-based Intrusion Detection System that uses the Cowrie honeypot to collect attack data in a Debian VMware setup. Data is stored in MongoDB and analyzed using the AdaBoost algorithm ⚙️ to detect threats. This project shows how honeypots and ML can enhance cybersecurity.

An end-to-end cyber threat intelligence pipeline using Cowrie, Wazuh, and OpenSearch to capture, normalize, and visually track live SSH brute-force attacks.

Cloud-native honeypot and threat intelligence platform on AWS. 42 resources in modular Terraform, Docker Compose, GitHub Actions CI gated on Checkov policy scanning.

Yet another docker cowrie image

SSH honeypot based on Cowrie with automatic Avatoris reporting for failed login attempts, optional host sshd monitoring, IP-based deduplication, and privacy-conscious reporting.