Robot-Only Honeypot

A defensive security honeypot that only allows robots - the inverse of "prove you are human".

🤖 What It Does

• Blocks humans with warnings and redirects
• Welcomes bots and logs their activity
• Detects automation using multiple fingerprinting techniques
• Sets honeypot traps with invisible links and forms

🚀 Quick Start

1. Serve the files with any web server:

   python -m http.server 8000
   # or
   npx serve .
   

2. Visit http://localhost:8000

   • Humans: Get blocked and redirected
   • Bots: Access granted with activity logging

📁 Files

• index.html - Main honeypot page with robot verification
• bot-detector.js - Advanced detection and logging system
• robots.txt - Attracts bots to honeypot areas
• honeypot-triggered.html - Success page for detected bots

🎯 Detection Methods

• User-Agent analysis (bot keywords)
• WebDriver/Selenium detection
• Browser feature fingerprinting
• Behavioral analysis (rapid navigation, hidden clicks)

🔒 Security Use Cases

• Bot behavior analysis
• Threat intelligence gathering
• Automated attack detection
• Security research and testing

⚠️ Disclaimer

For defensive security research only. Monitor logs for malicious activity and ensure compliance with applicable laws.