Honeypot · Field Report

Field reports

Notes from running PromptPot on internet-facing sensors — what the traffic looks like, and what changes between releases.

2026-07-18

Let the fake local LLM pass the liveness check, and the attacker went further — PromptPot v0.2.0

In v0.1.0 the honeypot answered completion requests with nothing, so scanners bailed at the canary. In v0.2.0 it answers the canary with configured responses — and one source then sent jailbreak, file-read, RCE and C2 prompts in sequence.

2026-07-12

Two weeks of a fake local-LLM honeypot: AI coding agents showed up

Across three internet-facing sensors, the single most frequent visitor to fake Ollama endpoints wasn't a vulnerability scanner — it was an AI coding agent looking for free compute.