Deploy YOUR OWN Honeypots on the Internet
Source: YouTube · John Hammond · published Oct 13, 2026 · 47:13
BLUF: Grey Noise founder Andrew Morris introduces Project Swarm, a $1/month platform allowing users to deploy honeypots and access global internet traffic data to detect in-the-wild exploits and botnet activity 12:07 39:36.
Key Takeaways:
• Project Swarm uses a lightweight sensor that tunnels traffic to Grey Noise’s data center, enabling users to simulate hundreds of software profiles or bridge physical hardware like routers without exposing their local network 11:55 14:42.
• The platform provides immediate visibility into malicious traffic; for example, Morris demonstrated identifying a botnet using identical SSH fingerprints across thousands of IPs globally, which were already tagged as malicious 08:40 10:15.
• Users can download full PCAP files, analyze payloads, and utilize AI tools like the Grey Noise MCP server to automate threat hunting and correlate data with partners like VirusTotal 19:55 24:02.
• Morris highlights that attackers are now adapting to new vulnerabilities within hours rather than months, and AI-generated malware is becoming increasingly sophisticated, making real-time data collection critical 39:45 40:15.
• Future developments include allowing users to rent Grey Noise sensors directly and deploying firmware on vulnerable IoT devices to capture exploitation attempts more effectively 44:46 45:03.
Project Swarm democratizes access to honeypot data, empowering security professionals and enthusiasts to discover zero-day exploits and track attacker tradecraft with unprecedented ease and scale.
Sources:
- 12:07 Explanation of the sensor architecture and tunneling mechanism.
- 14:42 Demonstration of bridging real hardware via Raspberry Pi.
- 08:40 Identifying SSH botnet activity through fingerprint matching.
- 10:15 Correlating global IPs with malicious tags.
- 19:55 Downloading PCAP files for payload analysis.
- 24:02 Overview of the Grey Noise MCP server for AI integration.
- 39:45 Discussion on the speed of modern exploit adaptation.
- 44:46 Future plans for sensor rental and IoT firmware.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Alrighty. Hey everyone, thank you so much for tuning in. Look, I'm stoked to finally get a chance to hang out with Andrew Andrew Morris, the founder of Grey Noise and doing some incredible things over there listening to the internet and seeing what weirdness is going on. Uh, but Andrew, I think you've been pretty busy lately. What's going on in your world? >> Hey, John. It's good to see you. It's good to be here. I have been very busy lately. We released this new thing called Project Swarm. We've been working on it for a long time. Also, the internet seems to be kind of on fire lately, which is to say there's lots of bugs, as it turns out. Tons of bugs. So, yeah, we've been um we have been busy listening to all the different weird corners of the internet. Um and uh yeah, it's been a lot of…