Skip to content

Monero honeypot proxy node. Obtain IP addresses and raw transaction details, by running a simulated node.

License

Notifications You must be signed in to change notification settings

covertsecurity/xmrpot

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

XMRPot — Monero Honeypot Proxy Node

XMRPot is a Monero honeypot tool designed to simulate a Monero node and capture raw transaction details and source IP addresses from clients interacting with it. This is intended for research and monitoring purposes to better understand how Monero nodes are being accessed or misused.

Tool Running

🧠 Features

  • Simulates a functioning Monero node to attract traffic.
  • Logs inbound requests and transactions.
  • Extracts IP addresses and raw transaction data.
  • Offers a simple monitoring dashboard and statistical overview.

🚀 How to Use

git clone https://github.com/covertsecurity/xmrpot.git
cd xmrpot
python3 xmrpot.py

📸 Screenshots

1. Initial Wallet Setup

Initial Wallet
This screen shows the setup of the initial wallet environment to simulate node behavior and attract incoming transactions.

2. Node Configuration

Node Configuration
Displays the current configuration settings of the simulated node, including exposed ports and operational parameters.

3. Transaction Sent to Node

Transaction Sent
A transaction has been sent to the honeypot node, demonstrating how malicious or unaware clients interact with it.

4. Transaction Being Monitored

Transaction Monitored
Captured transaction data is being monitored in real time, including metadata like size and source IP.

5. Monitoring Dashboard

Monitoring Dashboard
A visual dashboard summarizing recent node activity, transaction logs, and inbound connection attempts.

6. Statistics Panel

Statistics Panel
A breakdown of usage patterns, number of transactions, and source IP distribution over time.

📂 Files

  • xmrpot.py — Main honeypot implementation script.
  • request_log.json — Stores logged incoming request data.
  • img/ — Contains screenshots and illustrations.
  • LICENSE — Project license.
  • README.md — This documentation file.

About

Monero honeypot proxy node. Obtain IP addresses and raw transaction details, by running a simulated node.

Topics

Resources

License

Stars

Watchers

Forks

Languages