Creating a Live Attack Map with Grafana, Cowrie, and Prometheus reddit / selfhosted ---------------------------------------------------------------------- TheKing464 · 2023-12-15 11:56 Hey I'm diving into the exciting world of honeypots and cybersecurity at home, and I'd love some guidance on creating a live attack map using Grafana. Specifically, I'm using Cowrie for my honeypot and feeding its data into Prometheus to visualize attacks in Grafana. Now, here's where I could use some help. ​ https://preview.redd.it/3yu1gngy6g6c1.png?width=1969&format=png&auto=w ebp&s=f0567f2315cfbfa296a39c42b102cc9e88544d4b I've been inspired by those awesome live attack maps from TPOTCE, and I'm eager to replicate something similar for my own setup. As a newbie in homelabs, I'm wondering if anyone has experience or advice on achieving this. I'd appreciate insights on how to Configure Grafana to visualize the attacks in real-time. If you've tackled a similar project or have tips for a homelab newbie, I'd love to hear about your experiences and any resources you found helpful. ---------------------------------------------------------------------- AliasJackBauer · 2023-12-15 18:59 Could you share some details of your setup? ---------------------------------------------------------------------- TheKing464 · 2023-12-16 00:11 I've set up a honeypot using Cowrie, deployed within its own Docker network. The remaining containers, including Grafana and Prometheus, operate in a separate Docker network. To enhance security, I've exposed port 22 on my router, forwarding it to port 2222 where Cowrie runs. To analyze the collected data, I've developed a Python script to extract logs from Cowrie's JSON output. These logs are then transformed into metrics for Prometheus to ingest. Currently, I'm exploring Grafana to visualize and interpret these metrics. My interest in cybersecurity motivates me to continuously learn and experiment with new technologies. If you have any specific questions or require additional details, feel free to ask!