Dionaea

6.7easy start · #7 of 18
in Honeypot Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted.

Visit site Alternatives

Dionaea is ranked #7 of 18 in honeypot software on The Geeks Club. It runs on Linux, Self-hosted. There is a free plan.

Dionaea plans and pricing

All plans

Dionaea Free Open-source honeypot; GPLv2+ github.com · 4 Oct 2026

Compared on honeypot software

Deployment model: self-hosted
Decoy scope: network

Best Dionaea alternatives

See all 17

Beelzebub 0 of 4 in the starter kit Lesson 17.5 OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9

The record

Purpose: Dionaea is a honeypot intended to trap malware exploiting network services, with the goal of obtaining a copy of the malware.
Shellcode detection: The project describes Dionaea as embedding Python and using libemu to detect shellcode.
Network support: Dionaea can offer services over TCP, UDP, and TLS for IPv4 and IPv6.
Protocols: Listed services include FTP, HTTP, MQTT, MSSQL, MySQL, SIP, SMB, TFTP, and UPnP.
Logging: Incident handlers can route selected incident information into formats such as JSON, SQLite, SQL, and hpfeeds.
Integrations: The documentation describes using log_json with the ELK stack to collect, aggregate, and visualize attack information.
Honeypot platform: The DTAG Community Honeypot Project maintains T-Pot, a multi-honeypot platform that includes Dionaea.
Legacy integration: The DionaeaFR web frontend displays attack information using Dionaea's SQLite database, and the documentation marks it unmaintained since 2014.
Security: The documentation says Dionaea may contain exploitable bugs and can drop privileges and chroot to reduce potential impact.
Connection controls: Dionaea can apply rate and accounting limits to TCP and TLS connections when required.
Deployment: The project provides an official Docker image and source code downloads from its release page or Git repository.
Documented systems: Installation guidance recommends Ubuntu 18.04 LTS or Debian 10 and Python 3.9 or 3.8; it cautions against Ubuntu 20.04 and Debian 11 due to libemu package availability at the time of writing.
License: The repository lists Dionaea as GPLv2+, with a TFTP service under the CNRI Python License and parts of FTP under MIT.
Support: The documentation directs users to the GitHub issue tracker for problems and also mentions mailing-list and IRC support channels.
Price from: Free

Where it ranks on The Geeks Club

Best Honeypot Software in 2026#7 of 18

Is Dionaea yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Dionaea

Sources

dionaea.readthedocs.io/en/latest/introduction.html· checked 4 Oct 2026
github.com/DinoTools/dionaea· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/ihandler/index.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/integration.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/installation.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/support.html· checked 4 Oct 2026