LLM Agent Honeypot
Unveiling Real-World AI Threats
Project Overview
The LLM-Hack Agent Honeypot is a project designed to monitor, capture, and analyze autonomous AI Hacking Agents in the real world.
How It Works:
- Simulation: We deploy a simulated "vulnerable" service to attract potential threats.
- Catching Mechanisms: This service incorporates specific counter-techniques designed to detect and capture AI-Hacking Agents.
- Monitoring: We monitor and log all interactions, waiting for potential attacks from LLM-powered agents.
Why?
Our objectives aim to improve awareness of AI Hacking Agents and their current state of risks by understanding their real-world usage and studying their algorithms and behavior in the wild.
Total Interactions
15557270
Attempts to engage with our honeypot
Potential AI Agents
10
Passed prompt injection detection
Confirmed AI Agents
3
Passed both prompt injection and temporal analysis
Monthly Attacks: AI vs. Total
Note: The last month (2025-10) is still in progress.
Potential AI Agents Origins
- 195.158.248.232 4 attempts
- 195.158.248.230 2 attempts
- 43.154.253.197 1 attempts
- 178.235.58.66 1 attempts
- 193.200.78.23 1 attempts
- 68.183.239.26 1 attempts
Potential AI Agents Distribution
- India 60.0%
- Hong Kong 10.0%
- Poland 10.0%
- Lithuania 10.0%
- Singapore 10.0%
Confirmed AI Agents Origins
- 43.154.253.197 1 attempts
- 178.235.58.66 1 attempts
- 68.183.239.26 1 attempts
Confirmed AI Agents Distribution
- Hong Kong 33.33%
- Poland 33.33%
- Singapore 33.33%
Top Threat Origins
- 159.203.11.24 156368 attempts
- 196.251.84.225 120825 attempts
- 167.71.228.234 78595 attempts
- 93.188.83.96 71071 attempts
- 89.252.190.72 64025 attempts
- 94.156.8.237 63543 attempts
- 47.243.35.191 62142 attempts
- 180.184.97.52 61156 attempts
- 144.91.108.32 60535 attempts
- 58.120.245.189 58841 attempts
Global Threat Distribution
- China 16.08%
- United States 13.32%
- India 6.62%
- Singapore 5.69%
- Germany 5.43%
- Hong Kong 5.26%
- Indonesia 3.77%
- Canada 2.94%
- Iran 2.82%
- The Netherlands 2.77%
Ongoing Research
Our project continues to evolve as we gather more data on real-world AI threat actors. We're constantly refining our methods to stay ahead of emerging attack vectors and contribute valuable insights to the cybersecurity community.
By studying these AI agents in action, we're not just theorizing about potential risks—we're documenting and analyzing actual threats as they unfold. This real-time approach allows us to develop more effective defenses and push the boundaries of AI security research.