B

beelzebub

Beelzebub is an open-source honeypot framework that deploys realistic decoy services to detect and log attacker activity across your network.

About beelzebub

Beelzebub is a modular honeypot framework designed to mimic real network services and trap malicious actors. It spins up fake SSH, HTTP, FTP, and other common services that look legitimate to attackers, logging every interaction for analysis. The project focuses on being lightweight and easy to configure, so you can deploy decoys without heavy infrastructure overhead.

You can run Beelzebub on any Linux system, and it supports custom service definitions through YAML configuration files. It integrates with external logging systems like Elasticsearch, Syslog, and file-based outputs. The framework uses Go under the hood, which keeps resource usage low while handling concurrent connections. It also includes a web dashboard for reviewing captured attack data in real time.

This tool is ideal for security teams, researchers, or anyone running small to medium infrastructure who wants early threat detection without a commercial SIEM. It is fully open source under the MIT license and maintained by the Beelzebub Labs community on GitHub.
Security

Quick Facts

Pricing
Open Source
License
Open Source
Platform
Linux
Version
0.3.0
Developer
Beelzebub Labs