Observed arrival · 2026-11-14
MjødNet’s honeynet for AI-era intruders
MjødNet describes a self-hosted honeynet that simulates servers and networks, records intruder activity, and distinguishes people, scripts, and AI agents.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Security teams investigating internet-facing attacks
- Worth noticing
- The sample transcript flags a canary-file prompt followed by rapid reads, and labels the activity with ATT&CK technique references.
Field notes
The configuration example models a DMZ and LAN, with a permitted route from one to the other and simulated SSH, HTTPS, and MySQL services. A displayed transcript illustrates the proposed agent signal: a long pause, then several commands arriving quickly, including reads of files named in a prompt. The console material is identified as demo data, and the site directs interested operators to apply for a closed beta.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue