Security & Testing

honeylabs.net

Provides tools to query and analyze honeypot attack data, including event search, attacker ranking, IOC lookup, payload search, and attack timelines.

1 endpoint8 known toolsCached registry data

ENDPOINT 1

https://mcp.honeylabs.net/mcp

No auth detected

Known tools 8

search_events_tool

Return individual raw honeypot events with all fields.

top_attackers_tool

Ranked leaderboard of attack sources.

ioc_lookup_tool

Look up any IP address or domain in the honeypot dataset.

payload_search_tool

Full-text search across HTTP URL paths and user agents in attack traffic.

attack_timeline_tool

Attack volume over time, bucketed by hour or day.

asn_enrich_tool

Full honeypot profile for an ASN (autonomous system / hosting provider).

fingerprint_search_tool

Search honeypot activity by TLS, HTTP, or SSH fingerprint.

fingerprint_population_tool

The population behind a single client fingerprint: how many source IPs carry it, across how many networks (ASNs) and countries, the ports they hit, the top networks and a sample of the IPs, plus a read on whether it is concentrated (a likely coordinated operation, many IPs on few networks) or spread thin (a common client).