HONEYPOT // Threat Operations Center

█ THREAT OPS

Cowrie Dionaea Nginx

A live Ubuntu VPS honeypot capturing real-time internet-wide exploit attempts, brute-force campaigns, and malware stagers across SSH, Telnet, SMB, MSSQL, MySQL, and HTTP attack surfaces.

Mode: LIVE · Events: 0 · Markers: 0

Cowrie Security Boundary

SSH/Telnet Interactive Honeypot

BIND: :22→2222 :23→2223

Emulates Debian/Ubuntu shells. Captures brute-force credentials, interactive terminal commands, and malware download attempts.

Dionaea Malware Ingestion Matrix

Network Service Emulation Trap

BIND: :445→4545 :1433→14433 :3306→33306

Simulates vulnerable Windows SMB, MSSQL, and MySQL daemons. Captures exploit payloads and shellcode stagers.

Nginx Enterprise Web Edge Trap

HTTP Application-Layer Trap

BIND: :80 :443

Transparently intercepts HTTP/HTTPS scanner traffic. Routes malicious URI patterns into forensic signature logs with TLS handshake telemetry. Serves decoy SSL cert to raw IP probes.

Total (7d)

Unique IPs

Malware

Web Exploits

◉ Global Threat Cartography

☃ ASN & Port Telemetry Matrix

◉ Port Dashboard

SSH

Telnet

HTTP

445

SMB

1433

MSSQL

3306

MySQL

ASN/ISP	Count
Loading...

☰ Live Packet Stream Terminal

[Loading historical data...]

♦ Brute-Force Credential Directory

☢ Captured Payloads & Malicious Stagers

ID	Protocol	Size	Payload
Loading...

🌎 Web Exploit Signature Stream

★ Temporal Attack Frequency

◉ Port Dashboard

◉ FORENSIC INSPECTOR