Weekend Plan: Cowrie Honeypot Log Analysis
Over one weekend, I set up a Cowrie SSH/Telnet honeypot on a VPS to see what kind of activity it would attract, then explored the logs in a Jupyter notebook. In less than two days, it collected more than 8,000 events and over 1,500 sessions from 123 unique IP addresses.