HoneyTrack — Cowrie Honeypot Intelligence Platform

Running a standard Cowrie honeypot generates a massive volume of raw attacker telemetry, but making sense of it in real time is a major operational challenge. Cybersecurity teams usually have to dig through unstructured log files, manually correlate threat behaviors, and calculate risk levels by hand before they can take defensive action. This delay leaves systems vulnerable to repeated automated attacks, lateral movement, and brute-force attempts. Our solution, HoneyTrack, is an automated Cowrie Honeypot security stack that bridges the gap between raw logs and instant defense. Designed for security analysts and systems administrators, HoneyTrack features a custom backend parser and multi-factor risk engine that reads Cowrie session outputs, scores the severity of attacker commands and credentials, and feeds everything straight into a clean, real-time Flask web dashboard. What makes HoneyTrack creative and unique is its automated active-response loop: when high-risk commands cross defined thresholds, our automated firewall integration steps in dynamically via the Unix domain sockets to block attacker with adaptive firewall rules. It takes the guesswork out of honeypot monitoring, transforming passive log collection into an active, visual, and automated intrusion prevention system.