# Honeyntp

Honeyntp is a Honeypots & Deception product. It runs on-premises. Pricing is free.

Honeyntp is an NTP honeypot and logging tool that captures NTP packets into a Redis database to detect DDoS attacks and monitor network time protocol traffic.

Checked October 2026.

## What is Honeyntp?

Honeyntp is an NTP-based honeypot and logging tool that captures and analyzes Network Time Protocol (NTP) traffic for security monitoring purposes.

The tool functions as both a scanner logger and honeypot, recording all incoming NTP packets into a Redis database for storage and analysis. It maintains detailed tracking information including first-seen and last-seen timestamps for each unique IP address and port combination.

Built on the ntplib library, Honeyntp has been tested and verified to work on both Linux and Windows 7 operating systems. The tool provides cross-platform compatibility for deployment in various network environments.

One of the primary use cases for Honeyntp is detecting Distributed Denial of Service (DDoS) attacks that leverage NTP amplification techniques. The tool is particularly effective at identifying malicious traffic patterns where attackers commonly use port 80 as the source port for their attacks.

The Redis database backend enables efficient storage and retrieval of captured NTP traffic data, allowing security analysts to perform historical analysis and identify trends in attack patterns over time.

Tags: DDoS, Redis, Attack Detection

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Honeypots & Deception](https://cybersectools.com/categories/honeypots)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 55
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## Honeyntp FAQ

### What is Honeyntp?

Honeyntp is a product in the Honeypots & Deception category. It covers DDoS, Redis and Attack Detection.

### What is the pricing for Honeyntp?

Honeyntp is free. Download and setup instructions are at https://github.com/fygrave/honeyntp/.

### What are alternatives to Honeyntp?

Alternatives to Honeyntp listed on CybersecTools:

1. [Acalvio ShadowPlex](https://cybersectools.com/tools/acalvio-shadowplex) - Deception platform using external-facing decoys for threat intel & recon detection (Commercial)
2. [Anantis TrapEye](https://cybersectools.com/tools/anantis-trapeye) - Detects intruders the moment they interact with your network. (Commercial)
3. [Tropico Security - AI Powered Deception](https://cybersectools.com/tools/tropico-security-ai-powered-deception) - AI-powered deception platform that predicts, traps, and neutralizes attackers. (Commercial)
4. [Aves Netsec Defused](https://cybersectools.com/tools/aves-netsec-defused) - SaaS cyber deception platform deploying decoy sensors to detect attackers. (Free)
5. [HoneyWire](https://cybersectools.com/tools/honeywire) - Open-source canary/deception platform for detecting lateral movement on Linux networks. (Free)

Compare all Honeyntp alternatives at [https://cybersectools.com/alternatives/honeyntp](https://cybersectools.com/alternatives/honeyntp)

### What deployment and organization size does Honeyntp fit?

Honeyntp is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Honeyntp with similar solutions

- [Honeyntp vs Acalvio ShadowPlex](https://cybersectools.com/compare/acalvio-shadowplex-vs-honeyntp)
- [Honeyntp vs Anantis TrapEye](https://cybersectools.com/compare/anantis-trapeye-vs-honeyntp)
- [Honeyntp vs Tropico Security - AI Powered Deception](https://cybersectools.com/compare/honeyntp-vs-tropico-security-ai-powered-deception)

All alternatives to Honeyntp: [/alternatives/honeyntp](https://cybersectools.com/alternatives/honeyntp)

---

Source: https://cybersectools.com/tools/honeyntp

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Honeyntp: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md