AI Honeypots
ID: 8be573f0-01f8-508a-9128-396e3807e162
STIX ID: identity--8be573f0-01f8-508a-9128-396e3807e162
AI Honeypot Observatory operates a distributed network of LLM honeypots posing as Ollama, LiteLLM, OpenAI-compatible, and LM Studio endpoints. This processor publishes IP, domain, URL, and hash indicators observed scanning or abusing those honeypots, along with related user-agent, path, and captured-prompt context, ATT&CK, and ATLAS mappings, to support AI infrastructure defense and threat hunting.