Option 1: Using T-Pot (All-in-One)
git clone https://github.com/telekom-security/tpotce
cd tpotce
./install.sh --type=userOption 2: Simple SSH Honeypot (cowrie)
sudo apt install cowrie -y
sudo systemctl start cowrieOption 3: Python Honeypot (low interaction)
pip install honeypot
honeypot --port 2222 --log /var/log/honeypot.logOption 4: Port Knocking Honeypot
Configure knockd to log all connection attempts but not open anything.