Run Your Own Massive Distributed Honeypot System(threatstream.github.io)
threatstream.github.io
Run Your Own Massive Distributed Honeypot System
http://threatstream.github.io/mhn
4 comments
The cool thing is you can pair this with Ansible and get 1,000's of honeypots deployed at once. In a proof of concept we deployed nearly dozens using digital ocean API and got blocked by their API creation limits.
If you use more interesting honeypot software like Conpot you can monitor which countries are attacking SCADA systems, etc.
If you use more interesting honeypot software like Conpot you can monitor which countries are attacking SCADA systems, etc.
Wow, Evil.
I've had really good results at Kiva with Project Honeypot and http:bL but have also implemented a local management for whitelisting/blacklisting IPs to work around what it misses or is overzealous on.