Daily Threat Report

Automated report for 20 de julio de 2026. Recorded 0 SSH connections and 4464 multi-protocol decoy events on HoneyAI, from 1 unique IPs. 0 IPs were automatically reported to the AbuseIPDB community database.

SSH Activity (HoneyAI)

The SSH service received 0 login attempts from 0 unique IPs. Attackers executed 0 commands after gaining simulated system access.

Multi-Protocol Decoys (HoneyAI)

Detected 4464 events across services including FTP, Telnet, SMTP, MySQL, Redis, Git, VNC, and RDP from 1 distinct IPs. All events are access attempts against simulated production services.

HTTP Web Service (HoneyAI)

The web service received 63 HTTP requests from real scanners across 36 unique IPs. Each attacker received a fake response generated in real time by the local AI engine (Ollama, no internet connection required).

MCP Agent Trap

The MCP decoy server received 3 requests from 1 unique IPs. Attackers attempted to call internal tools including credential extraction and system command execution.

MSSQL / SNMP Honeypots

The MSSQL decoy received 0 authentication events from 0 IPs. The SNMP trap received 0 queries from 0 IPs probing community strings and OIDs.

Portscan Detection

Detected 0 incoming port scan events from 0 unique IPs.

AI Defense Stats

Blocked 0 prompt injection attempts and 0 identity leak attempts.

Active Defense (Operation Spine)

HoneyAI performed 0 reverse port scans back to active attacker IPs. Out of these, 0 hosts were found running open public services, allowing backfire profiling.

Network IDS (Suricata)

The network intrusion detection system generated 17704 alerts from 392 unique source IPs. Suricata monitors all traffic on the primary network interface using Emerging Threats + AlienVault OTX rulesets.