한국어 · English
Welcome to my honeypot
This host exists to observe attacks. Everything you see here is bait.
What this host is for
Every SSH connection and web request that reaches this host is recorded — the usernames
and passwords that were tried, the commands that were typed, the request bodies that were
sent. The data is used for research and for teaching.
The bait (all of it is fake)
- /portal — a corporate portal login. Served over
plain HTTP on purpose, so a class can watch credentials travel in the clear
in Wireshark
- /en/board/ (한국어) — a support forum.
Anyone can post without logging in, and the search box pretends SQL injection works.
Korean and English versions sit side by side so we can measure which one draws
more attention
- /files/ — a file share that accepts uploads of any extension.
The listing deliberately mixes Korean-named and English-named files
/manager/login · /wp-login.php ·
/phpmyadmin/ · /admin — the paths scanners love
All of it acts real, and none of it has a system behind it. Uploaded files are never
stored, scripts are never executed, and the SQL errors are just strings.