About HoneyLabs
HoneyLabs is an MCP server published by honeylabshq in the Security category: query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.
The repository has 2 stars and 0 forks, with the last commit 4 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/honeylabshq/honeylabs-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (8)
asn_enrichFull profile for an ASN: total events, unique IPs, top ports, source countries, user-agents, org name.
Parameters not published.
attack_timelineHourly / daily attack volume over a window, with protocol / country / port filters.
Parameters not published.
cve_lookupWho is probing a named CVE: severity, KEV status, top probing IPs with ASN and scanner tag, fingerprints, sample paths, daily timeline.
Parameters not published.
fingerprint_searchSearch by TLS JA4 / JA3 / HTTP JA4H / SSH HASSH fingerprint to find shared infrastructure.
Parameters not published.
ioc_lookupIs this IP / domain known to be probing? Returns our verdict, whether it is a recognised benign scanner, the CVEs it probed, plus ports / paths / fingerprints.
Parameters not published.
payload_searchFull-text URL-path + user-agent search across attack traffic.
Parameters not published.
search_eventsRaw honeypot events matching filters (IP, ASN, country, dest_port, protocol, http_method, ja4/ja3, community_id, has_client_cert).
Parameters not published.
top_attackersRanked leaderboard of source IPs, ASNs, countries, ports, user-agents, or CVEs (`by='cve'`) over a time window.
Parameters not published.
Ask AI
Ask AI about HoneyLabs
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.