Repository Index

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

• cybersecurity
• honeypot
• python
• ai

Telnet Honeypot

• honeypot
• botnet
• python
• telnet

A docker based honeypot.

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

Spam Honeypot with Intelligent Virtual Analyzer

TR-069 Honeypot

Detect and log CVE-2019-19781 scan and exploitation attempts.

Open Source Telnet Honeypot

A honeypot for malware that propagates via USB storage devices

The NoSQL Honeypot Framework

High-interaction Honeypot for PLCs and Industrial Control Systems

A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org

• golang
• ssh-server
• honeypot
• ssh

a low-interaction honeypot

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

SSH, FTP and Telnet honeypots based on Twisted

• honeypot
• python
• twisted
• ssh

Honeypot (Dionaea and kippo) setup script

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction

Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers

:honey_pot: A simple and effective phpmyadmin honeypot

RDP honeypot

• suricata
• honeypot

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques