DShield Sensor Log Collection with ELK

Pythonic interface to the Internet Storm Center / DShield API.

mikrotik blacklist

A collection of IP addresses and hostnames banned by Greek law and global security services like Spamhaus for MikroTik firewall configurations

This project turns a Raspberry Pi 4 into a DShield honeypot to capture and study network probes and brute-force attempts in a safe lab

Query 'SANS' 'DShield' 'API'

🐍 Capture and analyze network probes and brute-force attacks by transforming a Raspberry Pi into a DShield honeypot for safe cybersecurity research.

jimi open source automation and SOAR platform plugin for dshield API

DShield Manager

Behavioral analysis layer for DShield logs: Clusters attackers by behavior rather than static artifacts. An ML pipeline that refracts raw honeypot logs into semantic behavioral fingerprints, clustering attacks, mining cross-IP campaigns, and grounding them in threat intel.