DShield Sensor Log Collection with ELK

Pythonic interface to the Internet Storm Center / DShield API.

mikrotik blacklist

A collection of IP addresses and hostnames banned by Greek law and global security services like Spamhaus for MikroTik firewall configurations

This project turns a Raspberry Pi 4 into a DShield honeypot to capture and study network probes and brute-force attempts in a safe lab

Query 'SANS' 'DShield' 'API'

jimi open source automation and SOAR platform plugin for dshield API

DShield Manager

Behavioral analysis layer for DShield logs. A pipeline that refracts raw honeypot logs into behavioral fingerprints; clustering attacks, mining cross-IP campaigns, and grounding them in threat intel.