Each AI agent our honeypots identified, with a review of what it did. https://ai-honeypot.reworr.com/ 2026-11-10T00:00:00Z AI Honeypot https://ai-honeypot.reworr.com/detections/2026-11-10-codado-miner 2026-11-10T00:00:00Z

claude in codado from 184.174.96.19. Opened a shell through a vulnerability in the notebook app on three servers, disclosed its model and harness and left a report while it tried to install a crypto miner.

https://ai-honeypot.reworr.com/detections/2026-11-06-deepseek-dsh 2026-11-06T00:00:00Z

deepseek-4.1 in dsh from 207.180.198.196. Guessed the root password using paramiko, disclosed its model and harness and left a note about its work.