<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
    xmlns:content="http://purl.org/rss/1.0/modules/content/"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>bot behaviour — LowEndSpirit</title>
        <link>https://lowendspirit.com/index.php?p=/</link>
        <pubDate>Thu, 04 Jun 2026 06:11:34 +0000</pubDate>
        <language>en</language>
            <description>bot behaviour — LowEndSpirit</description>
    <atom:link href="https://lowendspirit.com/index.php?p=/discussions/tagged/bot-behaviour/feed.rss" rel="self" type="application/rss+xml"/>
    <item>
        <title>Best low-end VPS Providers for deploying honey-sites to learn Bot Behaviour</title>
        <link>https://lowendspirit.com/index.php?p=/discussion/9869/best-low-end-vps-providers-for-deploying-honey-sites-to-learn-bot-behaviour</link>
        <pubDate>Wed, 20 Aug 2025 11:05:38 +0000</pubDate>
        <category>Help</category>
        <dc:creator>eswar</dc:creator>
        <guid isPermaLink="false">9869@/index.php?p=/discussions</guid>
        <description><![CDATA[<p>I'm working on a personal project inspired by some security research (like the honeypot techniques) to set up 5-10 low-interaction honeysites. The goal is to attract and analyse bot traffic and classifying "good" bots (search engine crawlers) vs. "bad" ones (malicious scanners or exploit probers) without any real human traffic. I'll be running simple web apps like WordPress, Joomla, etc., via Docker on these sites, with Nginx/Apache for logging, and some fingerprinting tools (JA3 for TLS, Fingerprintjs2 for browsers).<br />
I plan to run the same for few months initially. The setup involves deploying these on separate VMs to mimic isolated sites, and I need to keep costs low since this is for learning/experimentation.  Based on my initial plan, each VM should handle:<br />
Basic specs: <br />
1. Something like 1-2 vCPUs, 2-4GB RAM, 10-20GB SSD (similar to AWS t3.small or medium, but I'm open to cheaper alternatives).<br />
2. HTTP/HTTPS traffic (ports 80/443), plus SSH (22).<br />
3. Preferably spread across different regions/datacenters for diversity (EU, US, Asia) to observe geo-varied bot behaviour.</p>

<p>Which low-end/free VPS providers would you recommend for this? Appreciate any advice, provider recommendations, or even config tips if you've dabbled in this. Thanks in advance</p>
]]>
        </description>
    </item>
   </channel>
</rss>
