~ / projects / honeypot

honeypot monitor

Placeholder. An SSH honeypot that logs what real attackers try, and turns it into alerts and a map.

role
solo
year
2026
stack
Cowrie, Wazuh, Linux
status
live
[ live threat map ] [ source ]
World map with markers showing the origin of login attempts
Placeholder caption. Source countries of login attempts over 30 days.
SIEM dashboard with alert counts over time
Placeholder. Alert volume per rule level.
Terminal log of a captured attacker session
Placeholder. A captured session, commands and all.

notes

Placeholder problem

What broke, what you tried, what fixed it, what you learned.

Placeholder problem

What broke, what you tried, what fixed it, what you learned.

← back to projects