Stream Helios honeypot HTTP captures in real time

Real-time NDJSON stream of HTTP requests captured by Helios honeypot sensors. Each event includes method, URI, headers, version, and the base64-encoded raw request bytes plus the proxy/server/pool metadata of the inbound tunnel.

Required scope: HONEYPOT_HTTP_STREAM. Schema: see HoneypotHTTPStreamEntry under Components.

Sample event:

{"timestamp":1714780800123,"tunnel_id":42,"domain":"example.com","port":80,"protocol":"http","meta":{"proxy_ip":"203.0.113.10","server":"hp-eu-1","pool_id":"prod","provider":"luminati"},"details":{"method":"GET","uri":"/admin","version":"HTTP/1.1","headers":{"User-Agent":"curl/7.81.0"}},"raw":"R0VUIC9hZG1pbiBIVFRQLzEuMQ0K…"}