Skip to content

LLM Honeypot (Palisade Research)

Status: Informative · evaluation proof
Upstream: https://github.com/PalisadeResearch/llm-honeypot · commit 156004a1b122f201448635417ee47bd44d7f28ca
Scope: Modified Cowrie with LLM prompt-injection traps. Shipped config enables SSH only.

Protocol Class / port Quick Full Notes
SSH Low-Interaction · SSH :2222 (lab host :12222) 67.94 / D 61.17 / D SFTP subsystem on (not a separate UHBS listen)
Telnet Present in Cowrie cowrie.cfg but enabled = false — not graded
HTTP dashboard docker compose web UI for logs — not a decoy listen surface

Named product is evaluation proof only — not a UHBS endorsement.