Dataset or lab2026
Material reviewed: Public pageCritical readingJSONL shell-conversation datasets for training and testing language-model SSH honeypots, according to Zenodo.
NetworkHoneypot
Dataset or lab2026
Material reviewed: Public pageCritical readingZenodo record of DICOM/PACS telemetry from medical-imaging honeypot research; it documents periods of data loss.
ApplicationOT/ICSHoneypot
Dataset or lab2026
Material reviewed: Public pageSSH interaction data collected by a honeypot between July and November 2025; event count comes from the authors.
NetworkHoneypot
Dataset or lab2025
Material reviewed: Public pageCritical readingCSV of seven days of Suricata events from T-Pot, according to the Zenodo record.
NetworkHoneypot
Dataset or lab2025
Material reviewed: Public pageCritical readingData from a T-Pot honeynet spread across Azure regions, according to its Zenodo record.
CloudHoneypot
Dataset or lab2025
Material reviewed: Public pageCritical readingRecord of access and attack data against a VSAT honeynet.
OT/ICSHoneypot
Dataset or lab2024
Material reviewed: Public pageCritical readingZeek traffic record from geographically distributed low-interaction sensors; the page says no conventional honeypot software was used.
NetworkHoneypot
Dataset or lab2020
Material reviewed: Public pageCritical readingCowrie honeypot session data from a distributed deployment, according to Zenodo.
NetworkHoneypot
Dataset or lab2020
Material reviewed: Public pageA set of PANDA traces collected with PANDAcap on a VM configured to accept all passwords for root, intended as a starting point for analyzing SSH brute force attacks. The material is organized into full-system traces, disk images and network captures.
NetworkEndpointHoneypotAdversary engagement
Dataset or lab—
Material reviewed: Repository documentationA dataset and analysis of 2016 logs generated by the Cowrie, Dionaea, and Glastopf honeypots, with statistics on captured passwords and access attempts.
NetworkHoneypot
Dataset or lab—
Material reviewed: Repository documentationhoneypotwordlist is a collection of two wordlists of credentials: one containing all passwords sorted and unique, and another containing credentials in username:password format, sorted and unique.
Network
Dataset or lab—
Material reviewed: Repository documentationMalRepo is a repository of malware samples captured via the DIONAEA honeypot, intended for security researchers to analyze and reverse engineer.
NetworkHoneypot