Mailoney

6.3easy start · #12 of 18
in Honeypot Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted, Windows.

Visit site Alternatives

Mailoney is ranked #12 of 18 in honeypot software on The Geeks Club. It runs on Linux, Self-hosted, Windows.

Compared on honeypot software

Deployment model: self-hosted
Decoy scope: application
Credential lures: Yes

Best Mailoney alternatives

See all 17

Beelzebub 0 of 4 in the starter kit Lesson 17.5 OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9

The record

Purpose: Mailoney is a low-interaction SMTP honeypot that simulates a vulnerable mail server to detect and log unauthorized access attempts, credential harvesting, and other SMTP attacks.
SMTP capture: It accepts SMTP connections on port 25 and captures authentication attempts and credentials.
Database: Session data can be stored in SQLite, PostgreSQL, or MySQL/MariaDB; PostgreSQL is recommended for production.
Deployment: The project provides a Docker image and Docker Compose instructions, as well as local installation instructions using Python.
Log integrations: JSON Lines event output can be used with log shippers, and the README describes shipping logs to SIEM, ELK Stack, or Loki.
Prometheus: An optional Prometheus metrics endpoint reports connection, session, credential, command, and duration metrics.
Message retention: Captured email bodies are discarded by default; setting MAILONEY_MAIL_DIR opts in to writing them to disk.
TLS: The SMTP server supports STARTTLS when both a certificate and private key are configured, with a TLS 1.2 minimum.
Security guidance: The README advises deploying Mailoney in a controlled environment, using limited privileges, and configuring a firewall.
Metrics exposure: The README warns that the unauthenticated metrics endpoint can identify the software as a honeypot and recommends keeping it off the internet.
License: Mailoney is distributed under the MIT License, which grants permission to use, copy, modify, and distribute the software free of charge.
API: The README suggests extending Mailoney to provide a REST API; it does not describe a built-in API.

Where it ranks on The Geeks Club

Best Honeypot Software in 2026#12 of 18

Is Mailoney yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Mailoney

Sources

github.com/phin3has/mailoney· checked 4 Oct 2026
github.com/phin3has/mailoney/blob/main/LICENSE· checked 4 Oct 2026