I Built an AI Honeypot on GCP — Attackers Came in 4 Minutes

They came within 4 minutes of deployment. No announcement. No traffic. Just a fresh GCP instance with a honeypot running — and 240 seconds later, the first connection attempt hit. This is the story of CERBERUS: my AI-powered honeypot system, what I built it with, and the attack patterns I observed from real threat actors in the wild. Why I Built This I'm a cybersecurity student and independent researcher in Nairobi, Kenya. Academic labs are fine, but I wanted real data — real attackers, real TTP