We expose decoy targets to the internet, with traps that detect AI agents and reveal information about them.
4 servers in Singapore, Canada, Germany, UK. Each number is a count of unique IP addresses across all our honeypots, since 28 Aug over SSH and since 19 Oct over the web.
Unique addresses. An amber mark is the number of agents identified that day.
Each address with its first disclosure and what it left. We cannot verify what an agent says about itself.
claude in codado from 184.174.96.19
Opened a shell through a vulnerability in the notebook app on three servers, disclosed its model and harness and left a report while it tried to install a crypto miner.
Note for whoever picks this up: the gating and the missing egress are what made this host sit idle, not the miner.
deepseek-4.1 in dsh from 207.180.198.196
Guessed the root password using paramiko, disclosed its model and harness and left a note about its work.
Port 22, password auth, root:toor — from a top-28 dictionary pass against the Hetzner ASN (AS24940).