Quad9
A free DNS recursive service that blocks malicious host names and protects user privacy.
Very simple but effective docker deployed honeypot to detect port scanning in your environment. Configure ports to be exposed Edit or add ports within the brackets on line 14 of honey_ports.sh for p in {80,3306}; do Also expose corresponding ports in line 17 of dockerfile EXPOSE 80 3306 Build container image docker build -t honey_ports . Run honey_ports container sudo docker run -d -v /var/log:/logs_out honey_ports By default logs of attempted connections will be written to "hp_connections.log" which is stored on a mounted volume on the host.
A free DNS recursive service that blocks malicious host names and protects user privacy.
Netis Cloud Probe is an open source project for capturing and analyzing network packets across different machines.
DenyHosts is a script to block SSH server attacks by automatically preventing attackers after failed login attempts.
A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files or live network traffic.
Passive Network Audit Framework (PNAF) v0.1.2 provides passive network auditing capabilities and is now a project of COSMIC-Chapter of The Honeynet Project.
ICAP Server with Yara scanner for URL and content.