{"id":20216670,"url":"https://github.com/intelowlproject/greedybear","last_synced_at":"2026-04-02T21:28:04.402Z","repository":{"id":37961704,"uuid":"441282567","full_name":"intelowlproject/GreedyBear","owner":"intelowlproject","description":"Threat Intel Platform for T-POTs","archived":false,"fork":false,"pushed_at":"2024-10-29T18:32:50.000Z","size":5321,"stargazers_count":133,"open_issues_count":34,"forks_count":31,"subscribers_count":8,"default_branch":"main","last_synced_at":"2024-10-30T05:42:34.432Z","etag":null,"topics":["cyber-threat-intelligence","cybersecurity","hacktoberfest","honeypot","ioc","open-source","python","threat-intelligence","threatintel","tpot"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/intelowlproject.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"open_collective":"intelowl-project","github":"intelowlproject"}},"created_at":"2021-12-23T19:56:14.000Z","updated_at":"2024-10-26T12:45:18.000Z","dependencies_parsed_at":"2024-04-23T08:49:18.348Z","dependency_job_id":"fc007440-9e2f-4418-beca-8da8d748e80c","html_url":"https://github.com/intelowlproject/GreedyBear","commit_stats":{"total_commits":268,"total_committers":12,"mean_commits":"22.333333333333332","dds":0.4253731343283582,"last_synced_commit":"602fcf9bcb2b0073d0f0ad5ecc35859db2b195fb"},"previous_names":["honeynet/greedybear"],"tags_count":22,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intelowlproject%2FGreedyBear","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intelowlproject%2FGreedyBear/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intelowlproject%2FGreedyBear/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intelowlproject%2FGreedyBear/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/intelowlproject","download_url":"https://codeload.github.com/intelowlproject/GreedyBear/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247234921,"owners_count":20905854,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cyber-threat-intelligence","cybersecurity","hacktoberfest","honeypot","ioc","open-source","python","threat-intelligence","threatintel","tpot"],"created_at":"2024-11-14T06:29:12.065Z","updated_at":"2026-04-02T21:28:04.395Z","avatar_url":"https://github.com/intelowlproject.png","language":"Python","funding_links":["https://opencollective.com/intelowl-project","https://github.com/sponsors/intelowlproject"],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\u003cimg src=\"static/greedybear.png\" width=350 height=404 alt=\"GreedyBear\"/\u003e\u003c/p\u003e\n\n# GreedyBear\n[![GitHub release (latest by date)](https://img.shields.io/github/v/release/intelowlproject/Greedybear)](https://github.com/intelowlproject/Greedybear/releases)\n[![GitHub Repo stars](https://img.shields.io/github/stars/intelowlproject/Greedybear?style=social)](https://github.com/intelowlproject/Greedybear/stargazers)\n[![Twitter Follow](https://img.shields.io/twitter/follow/intel_owl?style=social)](https://twitter.com/intel_owl)\n[![Linkedin](https://img.shields.io/badge/LinkedIn-0077B5?style=flat\u0026logo=linkedin\u0026logoColor=white)](https://www.linkedin.com/company/intelowl/)\n\n[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)\n[![CodeQL](https://github.com/intelowlproject/GreedyBear/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/intelowlproject/GreedyBear/actions/workflows/codeql-analysis.yml)\n[![Dependency Review](https://github.com/intelowlproject/GreedyBear/actions/workflows/dependency_review.yml/badge.svg)](https://github.com/intelowlproject/GreedyBear/actions/workflows/dependency_review.yml)\n[![Pull request automation](https://github.com/intelowlproject/GreedyBear/actions/workflows/pull_request_automation.yml/badge.svg)](https://github.com/intelowlproject/GreedyBear/actions/workflows/pull_request_automation.yml)\n\nThe project goal is to extract data of the attacks detected by a [TPOT](https://github.com/telekom-security/tpotce) or a cluster of them and to generate some feeds that can be used to prevent and detect attacks.\n\n[Official announcement here](https://www.honeynet.org/2021/12/27/new-project-available-greedybear/).\n\n## Documentation\n\nDocumentation about GreedyBear installation, usage, configuration and contribution can be found at [this link](https://intelowlproject.github.io/docs/GreedyBear/Introduction/)\n\n## Public feeds\n\nThere are public feeds provided by [The Honeynet Project](https://www.honeynet.org) in this [site](https://greedybear.honeynet.org). [Example](https://greedybear.honeynet.org/api/feeds/cowrie/all/recent.txt)\n\nPlease do not perform too many requests to extract feeds or you will be banned.\n\nIf you want to be updated regularly, please download the feeds only once every 10 minutes (this is the time between each internal update).\n\nTo check all the available feeds, Please refer to our [usage guide](https://intelowlproject.github.io/docs/GreedyBear/Usage/)\n\n\n## Enrichment Service\n\nGreedyBear provides an easy-to-query API to get the information available in GB regarding the queried observable (domain or IP address).\n\nTo understand more, Please refer to our [usage guide](https://intelowlproject.github.io/docs/GreedyBear/Usage/)\n\n## Run Greedybear on your environment\nThe tool has been created not only to provide the feeds from The Honeynet Project's cluster of TPOTs.\n\nIf you manage one or more T-POTs of your own, you can get the code of this application and run Greedybear on your environment.\nIn this way, you are able to provide new feeds of your own.\n\nTo install it locally, Please refer to our [installation guide](https://intelowlproject.github.io/docs/GreedyBear/Installation/)\n\n## Sponsors and Acknowledgements\n\n#### The Honeynet Project\n\n\u003ca href=\"https://www.honeynet.org\"\u003e \u003cimg style=\"border: 0.2px solid black\" width=125 height=125 src=\"static/honeynet_logo.png\" alt=\"Honeynet.org logo\"\u003e \u003c/a\u003e\n\n[The Honeynet Project](https://www.honeynet.org) is a non-profit organization working on creating open source cyber security tools and sharing knowledge about cyber threats.\n\nThanks to [The Honeynet Project](https://www.honeynet.org) we are providing free public feeds available [here](https://greedybear.honeynet.org).\n\n#### DigitalOcean\n\nIn 2022 we joined the official [DigitalOcean Open Source Program](https://www.digitalocean.com/open-source?utm_medium=opensource\u0026utm_source=IntelOwl).\n\n\n## Maintainers and Key Contributors\n\nThis project was started as a personal Christmas project by [Matteo Lodi](https://twitter.com/matte_lodi) in 2021.\n\nSpecial thanks to:\n* [Tim Leonhard](https://github.com/regulartim) for having greatly improved the project and added Machine Learning Models during his master thesis. He's the actual Principal Mantainer.\n* [Martina Carella](https://github.com/carellamartina) for having created the GUI during her master thesis.\n* [Daniele Rosetti](https://github.com/drosetti) for helping maintaining the Frontend.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintelowlproject%2Fgreedybear","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fintelowlproject%2Fgreedybear","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintelowlproject%2Fgreedybear/lists"}