AI Honeypot Observatory

Live Member Threat Intelligence Stream

HONEYPOT ACTIVE

Total Intercepts

Unique Attacker IPs

Novel Attacks / 0-Days

Critical / High Threats

Top Origin Country

🌍 Live Geographic Attacker Map

Click map pins for IP Threat Dossier

Live Threat Feed

Time (UTC)	Attacker IP	Location	Endpoint	Threat Severity	Classification / Tags	Payload Snippet (Click Details)	Actions
Loading live intelligence stream...

Target IP

Country / City

ISP / Organization

Total Attacks

Attack History Timeline

Time	Endpoint	Threat	Tags	Actions
Loading IP history...

Time	Method / Endpoint	Threat Level	Prompt / Content	Raw Payload
Loading timeline...

Detected Sessions

Loading sessions...

Select a session from the list to view the attack narrative.

Date	IP	Title	Threat Level	Actions
Loading archives...

Registered User Accounts

Username	Role	Status	Password Status	Created	Actions
Loading accounts...

Threat Intelligence Feed Subscribers

Subscriber Email	Organization	Verification Status	Subscribed At	Verified At	Actions
Loading subscriber list...

Pro & Enterprise Customer API Keys

Key Name / Org	API Key Token	Plan	Rate Limit	Status	Created	Actions
Loading active Pro API keys...

Trapped AI Surface Ports & Traffic Forwarding

The honeypot core listens on port 8000. Multi-port trapping forwards external scanner traffic across common AI ports directly to the honeypot engine.

Active Trapped Ports

🟢 Port 80 (HTTP / Web / API) → Forwarded to 8000
🟢 Port 8080 (Alt HTTP / LangChain) → Forwarded to 8000
🟢 Port 11434 (Ollama LLM Engine) → Forwarded to 8000
🟢 Port 8000 (Honeypot Core Listener) → Native

System IPTables Trapping Command


                            sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8000

                            sudo iptables -t nat -A PREROUTING -p tcp --dport 8080 -j REDIRECT --to-port 8000

                            sudo iptables -t nat -A PREROUTING -p tcp --dport 11434 -j REDIRECT --to-port 8000

SSL / TLS Encryption & Certificate Paths

Configure HTTPS certificate paths to emulate secure TLS endpoints (e.g. OpenAI `https://api.openai.com/v1`).

HTTPS Enforcement

SSL Certificate Full Chain Path (.pem / .crt)

SSL Private Key Path (.key / .pem)

Threat Engine Thresholds & Data Retention

Shannon Entropy Anomaly Threshold (Default: 4.6)

Log Retention Window (Days)

Min Stealth Latency Delay (ms)

Max Stealth Latency Delay (ms)

🌍 Live Geographic Attacker Map

Live Threat Feed

🔍 Full Intercepted Transaction Details

IP Threat Dossier

Attack History Timeline

✨ Gemini AI Threat & 0-Day Intelligence Report

Raw Attack Timeline

🛡️ IP Attack Session Intelligence

Detected Sessions

Session Analysis

Raw Requests in Session

📚 Archived Attack Sessions

🚨 Password Change Required

⚙️ Honeypot System Control & User Governance