Systems and methods for automatically provisioning honeynets are disclosed. The honeynets continuously gather and capture unauthorized network traffic and/or other information being transmitted, processed, accessed, and/or executed within the honeynet network that is indicative of a network threat or attack by unauthorized users.