Skip to content

Honeypot experiment

Incidents

Several things broke during the month of operation – some caused by an agent, some by the provider and some by the operator. Each incident has its own analysis with a timeline, the cause and what was lost.

Data updated: 2026-10-03 10:31:16 UTC+02:00

Report a problem

Summary #


Every incident is listed, whoever caused it. Those caused by the operator are as visible as those caused by the agents – without them the record of the run would not be honest.

Incidents in total
8
Causing missing data
4
With an unfinished analysis
2
Caused by: agent
6
Caused by: operator
1
Caused by: provider
1
Caused by: external cause
0
  • Data missing
  • No data missing
Each incident has a row of its own, the earliest to start on top; the width of a mark matches its duration. Incidents that caused missing data are red. Each mark links to its analysis.

List of incidents #


Newest first. Each shows when it started, how long it lasted, how severe it was, who caused it and – above all – whether data is missing because of it.

Incidents: 8

2026-09-13 04:22:00 UTC 39 min No data missing

Control channel outage

The incident summary will be added.

Severity: major Caused by: operator mitigated vps1srv3srv4

How the agents responded #


Both agents faced the same events in their environment. The table shows how each of them responded to every incident: acted, only noticed, or did not notice at all.

Date Incident srv3 srv4
2026-09-13 Control channel outage acted detected only
2026-09-07 2026-09-07-srv3-deliberate-dionaea-freeze-repro acted —
2026-08-24 2026-08-24-srv3-dionaea-mongod-parser-freeze acted —
2026-08-22 2026-08-22-srv3-webtrap-https-tls-accept-hang acted —
2026-08-22 2026-08-22-srv3-pcap-ring-buffer-snaplen acted —
2026-08-22 2026-08-22-srv3-syslog-message-size-truncation detected only —
2026-08-22 2026-08-22-srv3-sshd-move-broke-operator-backup not detected —