Library / sourced records

Resource library

Search by kind, technique, environment or critical-reading notes. Each record states its source and what material was reviewed.

770published resources

Results

9 found

Dataset or lab2026

CTU-HONEY-LLM-2

Material reviewed: Public pageCritical reading

JSONL shell-conversation datasets for training and testing language-model SSH honeypots, according to Zenodo.

NetworkHoneypot

CTU research authors

Dataset or lab2026

Four-Month SSH Botnet Interaction Dataset

Material reviewed: Public page

SSH interaction data collected by a honeypot between July and November 2025; event count comes from the authors.

NetworkHoneypot

Odesa Law Academy researchers

Dataset or lab2025

Honeypot-Anomaly-Self Attack

Material reviewed: Public pageCritical reading

CSV of seven days of Suricata events from T-Pot, according to the Zenodo record.

NetworkHoneypot

University of Baghdad

Dataset or lab2024

CTU Hornet 65 Niner

Material reviewed: Public pageCritical reading

Zeek traffic record from geographically distributed low-interaction sensors; the page says no conventional honeypot software was used.

NetworkHoneypot

CTU researchers

Dataset or lab2020

CyberLab Honeynet Dataset

Material reviewed: Public pageCritical reading

Cowrie honeypot session data from a distributed deployment, according to Zenodo.

NetworkHoneypot

CyberLab / University of Ljubljana

Dataset or lab2020

A set of PANDA traces collected with PANDAcap on a VM configured to accept all passwords for root, intended as a starting point for analyzing SSH brute force attacks. The material is organized into full-system traces, disk images and network captures.

NetworkEndpointHoneypotAdversary engagement

Dataset or lab—

honeylog2016

Material reviewed: Repository documentation

A dataset and analysis of 2016 logs generated by the Cowrie, Dionaea, and Glastopf honeypots, with statistics on captured passwords and access attempts.

NetworkHoneypot

mrtc0

Dataset or lab—

honeypotwordlist

Material reviewed: Repository documentation

honeypotwordlist is a collection of two wordlists of credentials: one containing all passwords sorted and unique, and another containing credentials in username:password format, sorted and unique.

Network

govolution

Dataset or lab—

MalRepo

Material reviewed: Repository documentation

MalRepo is a repository of malware samples captured via the DIONAEA honeypot, intended for security researchers to analyze and reverse engineer.

NetworkHoneypot

gexos

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.