Dionaea

Linux · Self-hosted

Visit site Alternatives

Freedom report

Two barsScore 6.3

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Dionaea is ranked #7 of 18 in honeypot software on Freedom251. It runs on Linux, Self-hosted. There is a free plan.

Dionaea plans and pricing

All plans

Dionaea Free Open-source honeypot; GPLv2+ github.com · 4 Oct 2026

Compared on honeypot software

Deployment model: self-hosted
Decoy scope: network

Best Dionaea alternatives

See all 12

Two bars Canarytokens Free tier No. 1Free6.6 One bar OpenCanary Free tier No. 2Free6.5 Two bars T-Pot Free tier No. 3Free6.5 One bar Beelzebub Free tier No. 4Free6.4 One bar Cowrie Free tier No. 5Free6.4 One bar Endlessh Free tier No. 6Free6.4

The record

Purpose: Dionaea is a honeypot intended to trap malware exploiting network services, with the goal of obtaining a copy of the malware.
Shellcode detection: The project describes Dionaea as embedding Python and using libemu to detect shellcode.
Network support: Dionaea can offer services over TCP, UDP, and TLS for IPv4 and IPv6.
Protocols: Listed services include FTP, HTTP, MQTT, MSSQL, MySQL, SIP, SMB, TFTP, and UPnP.
Logging: Incident handlers can route selected incident information into formats such as JSON, SQLite, SQL, and hpfeeds.
Integrations: The documentation describes using log_json with the ELK stack to collect, aggregate, and visualize attack information.
Honeypot platform: The DTAG Community Honeypot Project maintains T-Pot, a multi-honeypot platform that includes Dionaea.
Legacy integration: The DionaeaFR web frontend displays attack information using Dionaea's SQLite database, and the documentation marks it unmaintained since 2014.
Security: The documentation says Dionaea may contain exploitable bugs and can drop privileges and chroot to reduce potential impact.
Connection controls: Dionaea can apply rate and accounting limits to TCP and TLS connections when required.
Deployment: The project provides an official Docker image and source code downloads from its release page or Git repository.
Documented systems: Installation guidance recommends Ubuntu 18.04 LTS or Debian 10 and Python 3.9 or 3.8; it cautions against Ubuntu 20.04 and Debian 11 due to libemu package availability at the time of writing.
License: The repository lists Dionaea as GPLv2+, with a TFTP service under the CNRI Python License and parts of FTP under MIT.
Support: The documentation directs users to the GitHub issue tracker for problems and also mentions mailing-list and IRC support channels.
Price from: Free

Where it ranks on Freedom251

Best Honeypot Software in 2026#7 of 18

Is Dionaea yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Dionaea

Sources

dionaea.readthedocs.io/en/latest/introduction.html· checked 4 Oct 2026
github.com/DinoTools/dionaea· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/ihandler/index.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/integration.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/installation.html· checked 4 Oct 2026
dionaea.readthedocs.io/en/latest/support.html· checked 4 Oct 2026