What we know
Decoy software documenting bounded simulated responses for Kubernetes and Docker APIs, Ollama and other AI APIs, a misconfigured kubelet, and HTTP probes; it records TCP and UDP interactions without replying. It supports synthetic Secret honeytokens.
Evidence limits
Behavior is documented, not independently verified; the façade is not a real Kubernetes control plane.
Sources and provenance
- Zeerg/helix-honeypot repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.