Deploy YOUR OWN Honeypots on the Internet

Deploy YOUR OWN Honeypots on the Internet

🎙 John Hammond 👥 2.2M 📅 October 13, 2026 ⏱ 47 min 👁 30K 📄 tutorial 🧭 2026-10-16
Available in: English (current) Français

Keywords

honeypotProject SwarmSSHnetwork trafficthreat intelligence

Summary

In this video, John Hammond interviews Andrew Morris, founder of GreyNoise, about Project Swarm—a service that lets users deploy their own honeypots on the internet to capture real attack traffic. Morris explains how Swarm works: sensors are lightweight and forward packets via a tunnel to GreyNoise’s infrastructure, allowing for flexible simulation of various services. The video includes a live demo where John sets up five sensors on a DigitalOcean droplet and immediately sees exploit attempts, including SSH botnet activity. They explore the dashboard, filter benign scanners, and analyze a specific SSH fingerprint, revealing a botnet with thousands of malicious IPs. The discussion covers features like uploading custom OVA files to emulate any software, and connecting real hardware devices via a Raspberry Pi for transparent bridging. They also touch on GreyNoise’s analysis tools, including a free-text enrichment feature and an MCP server for AI integration. The video emphasizes how easy it is to get started and the educational value for beginners, while also showcasing advanced capabilities like TLS decryption for encrypted attacker traffic.

172 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides high practical value by showing real-world deployment of honeypots and the immediate observations from live internet traffic. The argumentation is solid, built on the credibility of GreyNoise’s infrastructure and the actual data presented. Morris demonstrates a clear understanding of threat landscapes and explains the technical design choices (e.g., sensor simplicity, central processing) convincingly. The hands-on approach strengthens the claims, as viewers see the process from installation to analysis. The video also argues for the accessibility of such tools, making advanced threat intelligence available to enthusiasts and professionals alike.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates rigor through the use of real data and systematic analysis (e.g., categorizing benign scanners, isolating malicious fingerprints). GreyNoise is a reputable company in the cybersecurity community, and the founders’ expertise adds credibility. The description links to official resources (Project Swarm, training, newsletter) and partner offers, which are clearly referenced. The title accurately matches the content, and while the video is promotional, it does not overstate capabilities. However, the lack of independent verification and potential bias toward promoting GreyNoise services slightly reduces the scientific rigor. No comments were provided, so public reception cannot be assessed.

203 words

Title / Content Match

The title accurately reflects the content: the video guides viewers through deploying their own honeypots using Project Swarm and observing real internet traffic. The title is clear and matches the demonstration and discussion.

Quality & Reliability

8/10

The video is a practical demonstration of Project Swarm by GreyNoise's founder, showing real network traffic and exploit attempts. It provides valuable hands-on insights, but is promotional in nature and lacks peer-reviewed or independently verified claims.

Key Moments

Cited Sources

  • Project Swarm — Main product demonstrated; users can deploy honeypots and access GreyNoise data.
  • GreyNoise Training — Offered as a learning resource for cybersecurity.
  • Newsletter — For updates and additional content.
  • InfoSec Map — Resource for cybersecurity events.
  • CodeCrafters — Partner offering coding challenges.
  • CyberDefenders — Blue team training and certifications.
  • OpenVPN — Resource for hosting a VPN.

Concurring Sources

  • Honeypot (Computing) - Wikipedia — Confirms general principles and utility of honeypots as described in the video.
  • GreyNoise — Official product aligns with the video's claims and provides additional documentation.

Contribution & Novelties

The video introduces Project Swarm, an innovative service that democratizes honeypot deployment by combining ease-of-use with sophisticated data analysis. It showcases how individuals can quickly set up sensors and gain access to a global threat intelligence network, which was previously the domain of large organizations. The demonstration of connecting physical hardware via a transparent bridge is particularly novel, allowing realistic honeypots without network exposure. The video also highlights GreyNoise’s efforts to decrypt TLS traffic, enabling visibility into encrypted attacker communications—a significant advancement in detecting hidden exploits.

Pour aller plus loin :

149 words

Radar Profile

The profile shows high scores across all dimensions, indicating a comprehensive and well-balanced video. The slightly lower fiabilité_globale (7) reflects the promotional aspect, but overall the content is technically strong and informative.

Reliability 7/10