boreltaf/honeypot-logger

# honeypot-logger A low-interaction honeypot logger deployable in internal networks (lateral movement detection) or on exposed IPs (darknet monitoring). Any connection to a honeypot port is automatically suspicious, and all connections are logged with source IP, payload, and geolocation for threat intelligence gathering.