1.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+336 stars
from 9,358 · score 5.82
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
42 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
- honeypot
- kubernetes
- +11 more
+276 stars
from 552 · score 5.62
3.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+197 stars
from 6,464 · score 5.29
4.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+138 stars
from 2,101 · score 4.93
+125 stars
from 2,969 · score 4.84
6.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+115 stars
from 2,115 · score 4.75
+77 stars
from 8,503 · score 4.36
8.jaksi / sshesame
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
+42 stars
from 1,731 · score 3.76
9.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+39 stars
from 1,130 · score 3.69
10.mushorg / conpot
ICS/SCADA honeypot
+37 stars
from 1,502 · score 3.64
11.0x4D31 / galah
Galah: An LLM-powered web honeypot.
- golang
- honeypot
- llm
- openai
- openai-api
- security
- +1 more
+20 stars
from 655 · score 3.04
12.qeeqbox / honeypots
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
- credentials
- honeypot
- +5 more
+12 stars
from 977 · score 2.56
13.DinoTools / dionaea
Home of the dionaea honeypot
+12 stars
from 807 · score 2.56
14.honeytrap / honeytrap
Advanced Honeypot framework.
+11 stars
from 1,303 · score 2.48
15.buffer / thug
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
- shellcode
- virustotal
- +1 more
+9 stars
from 1,037 · score 2.30
+8 stars
from 1,608 · score 2.20
17.mushorg / snare
Super Next generation Advanced Reactive honEypot
+6 stars
from 481 · score 1.95
+5 stars
from 1,730 · score 1.79
+5 stars
from 1,710 · score 1.79
20.droberson / ssh-honeypot
Fake sshd that logs ip addresses, usernames, and passwords.
+5 stars
from 669 · score 1.79
21.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
- security
- cybersecurity
- +2 more
+5 stars
from 478 · score 1.79
+5 stars
from 306 · score 1.79
23.SAP / cloud-active-defense
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
- infosec
- security
+5 stars
from 106 · score 1.79
+4 stars
from 600 · score 1.61
+4 stars
from 394 · score 1.61
+2 stars
from 2,459 · score 1.10
27.BinaryDefense / artillery
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+2 stars
from 1,037 · score 1.10
28.0x4D31 / honeyLambda
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- honeytoken
- honeypot
- security
- deception
- lambda
- serverless
- +2 more
+2 stars
from 525 · score 1.10
+2 stars
from 395 · score 1.10
+2 stars
from 277 · score 1.10
+2 stars
from 231 · score 1.10
32.0xBallpoint / trapster-community
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
- cybersecurity
- honeypot
- python
- ai
- deceptive
+2 stars
from 165 · score 1.10
33.sefcom / honeyplc
High-interaction Honeypot for PLCs and Industrial Control Systems
+2 stars
from 100 · score 1.10
+1 stars
from 1,080 · score 0.69
+1 stars
from 347 · score 0.69
36.robertdavidgraham / telnetlogger
Simulates enough of a Telnet connection in order to log failed login attempts.
+1 stars
from 246 · score 0.69
37.SentryPeer / SentryPeer
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
- peer-to-peer
- p2p
- +14 more
+1 stars
from 211 · score 0.69
38.sjhilt / GasPot
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
+1 stars
from 149 · score 0.69
39.ivre / masscanned
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
- tcp
- honeypot
- +8 more
+1 stars
from 139 · score 0.69
+1 stars
from 96 · score 0.69
41.aelth / ddospot
NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot
+1 stars
from 64 · score 0.69
+1 stars
from 55 · score 0.69