beelzebub-labs/beelzebub

Supports multiple protocols (SSH, HTTP, TCP, TELNET, MCP) with YAML-based service configuration and integrates LLM responses to simulate realistic system behavior while maintaining low-interaction security. Built-in Prometheus metrics, RabbitMQ event streaming, and Beelzebub Cloud reporting enable real-time threat monitoring and distributed intelligence sharing across a global honeypot network. Includes specialized MCP honeypots for detecting prompt injection attacks against AI agents.

1,926 stars. Actively maintained with 5 commits in the last 30 days.