Honeypot

AI-based deception platform for collecting cyber threat intelligence

Deception-based detection engine integrated into LMNTRIX XDR platform

OT security platform for ICS/SCADA environments with XDR capabilities

Threat intelligence platform with 500M+ entries for real-time threat analysis

Real-time threat intel platform detecting malicious scanning & exploitation

AI-powered deception platform using honeypots to detect & disrupt attacks

Cloud-native deception platform deploying dynamic security canaries

A low-interaction honeypot that simulates network services to detect and monitor potential intrusion attempts on internal networks.

The DShield Raspberry Pi Sensor is a tool that turns a Raspberry Pi into a honeypot to collect and submit security logs to the DShield project for analysis.

An open-source OSINT honeypot that monitors threat actor reconnaissance attempts and generates early-warning intelligence for blue teams during the pre-attack phase.

A signature-based, multi-threaded honeypot detection tool written in Golang that identifies honeypots through crafted requests and response analysis.

HoneyFS is an LLM-powered honeypot tool that generates realistic fake file systems using GPT-3.5 to deceive attackers and enhance security analysis.

An active and aggressive honeypot tool for network security.

Open-source honeypot tool for detecting and analyzing malicious activities in the Apache Struts exploit.

A Splunk application that processes honeypot data from hpfeeds channels to generate clustered meta-events and visualizations for security analysis.

A project providing honeypots for embedded device vulnerabilities with support for AWS integration and JSON output.

A PHP port of Rack::Honeypot, a spam trap that detects and blocks spambots

FraudGuard is a service that provides real-time internet traffic analysis and IP tracking to help validate usage and prevent fraud.

A honeypot that emulates a Belkin N300 Home Wireless router with default setup to observe traffic

A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files or live network traffic.

A low-interaction honeypot that uses Dionaea as its core, providing a simple and easy-to-use interface for setting up and managing honeypots.

A configurable DNS honeypot with SQLite logging and Docker support.

Blacknet is a low interaction SSH multi-head honeypot system with logging capabilities.

A high-interaction honeypot solution for detecting and analyzing SMB-based attacks