Honeypot
A honeypot is a deliberately exposed decoy system -- a fake server, service, or device -- set up to attract scanning and attack traffic so defenders can observe attacker behavior, techniques, and targets without putting any real system or data at risk. Because a honeypot has no legitimate business purpose, essentially all traffic that reaches it is unsolicited scanning, probing, or attack activity, which makes honeypot data useful for understanding what's actively being targeted on the internet right now -- which ports, which protocols, which known exploits -- rather than relying on theoretical risk alone. Honeypot and sensor networks are a common way security researchers and vendors gather real-world threat intelligence.
By AdminKit team, Netbase JSC · Updated