Daily Threat Report

Automated report for 22 de julio de 2026. Recorded 0 SSH connections and 0 multi-protocol decoy events on HoneyAI, from 0 unique IPs. 0 IPs were automatically reported to the AbuseIPDB community database.

SSH Activity (HoneyAI)

The SSH service received 0 login attempts from 0 unique IPs. Attackers executed 0 commands after gaining simulated system access.

Multi-Protocol Decoys (HoneyAI)

Detected 0 events across services including FTP, Telnet, SMTP, MySQL, Redis, Git, VNC, and RDP from 0 distinct IPs. All events are access attempts against simulated production services.

HTTP Web Service (HoneyAI)

The web service received 56 HTTP requests from real scanners across 27 unique IPs. Each attacker received a fake response generated in real time by the local AI engine (Ollama, no internet connection required).

MCP Agent Trap

The MCP decoy server received 0 requests from 0 unique IPs. Attackers attempted to call internal tools including credential extraction and system command execution.

MSSQL / SNMP Honeypots

The MSSQL decoy received 0 authentication events from 0 IPs. The SNMP trap received 0 queries from 0 IPs probing community strings and OIDs.

Portscan Detection

Detected 0 incoming port scan events from 0 unique IPs.

AI Defense Stats

Blocked 0 prompt injection attempts and 0 identity leak attempts.

Active Defense (Operation Spine)

HoneyAI performed 0 reverse port scans back to active attacker IPs. Out of these, 0 hosts were found running open public services, allowing backfire profiling.

Network IDS (Suricata)

The network intrusion detection system generated 9180 alerts from 343 unique source IPs. Suricata monitors all traffic on the primary network interface using Emerging Threats + AlienVault OTX rulesets.