Honeypot Vulnerable MCP Server Logs 3,044 Requests in 7 Days, No Real Attacks Yet

1337Captain · reddit · 2026-11-02

Reddit user 1337Captain set up an intentionally vulnerable MCP server (mcp.x-tangle.com/mcp) to observe malicious agent behavior. After 7 days online the dashboard shows 3,044 HTTP requests, 177 unique IPs, 91 MCP initializes, and 164 tool calls — but so far only scanners and MCP handshakes, no active attacks. The author invites others to point their agents at it and share how deep they got.

Original post →

More from coding & agent

coding & agent channel →