Daily threat intelligence analysis generated by a local AI model running on the same Raspberry Pi 5 that operates HoneyAI. No data leaves the device.
Honeypot Threat Analysis — May 2, 2026
Sustained critical-level attacks — consistent 2,000+ SSH attempts and MikroTik reconnaissance commands dominate post-auth activity.
Honeypot Threat Analysis — May 1, 2026
Labour Day brings no rest for attackers — 1,993 SSH connections, 4,235 multi-protocol events, and Hikvision camera exploits detected.
Honeypot Threat Analysis — April 30, 2026
Critical — nearly 2,000 SSH connections, 4,235 OpenCanary events, and 85 Galah requests. MikroTik router scanning detected.
Honeypot Threat Analysis — April 29, 2026
Critical severity continues — 2,064 SSH connections with 359 commands. Galah web scanning resumes with 76 requests.
Honeypot Threat Analysis — April 28, 2026
CRITICAL — 7,919 OpenCanary events in one day, the largest multi-protocol attack ever recorded. 1,926 SSH connections with 326 commands.
Honeypot Threat Analysis — April 27, 2026
172 IPs reported to AbuseIPDB. High-severity day with 784 SSH connections, 362 OpenCanary events, and Git config scanning detected.
Honeypot Threat Analysis — April 26, 2026
90 IPs reported to AbuseIPDB — community reporting fully operational. ClaudeBot AI crawler detected scanning the honeypot.