HoneypotLive - Real-time SSH bot interaction stream
Show HN: Watch bots interact with an SSH honeypot in real time
HoneypotLive offers a fascinating, real-time window into the world of automated cyberattacks by streaming live interactions with an SSH honeypot. This tool allows security enthusiasts and developers to watch bots attempt brute-force logins, execute malicious scripts, and probe for vulnerabilities as they happen. By visualizing raw connection logs, failed login attempts with common credentials, and successful intrusions where attackers try to install backdoors, it demystifies the mechanics of automated threats. It serves as an educational resource to understand current attack vectors and the relentless nature of botnets scanning the internet.
Watch bots interact with an SSH honeypot in real time to see exactly how automated attacks attempt to breach systems.
- micheloosterhof
Cowrie author here! Yes this is the usual background noise on the internet! Cowrie (which I suspect is used here as well as the data generator) recently had a lot of updates, including now easy install from pip (pip install cowrie), and a much improved shell parser that’s much more capable of parsing attacker commands! https://github.com/cowrie/cowrie and get the full raw data in JSON or other formats to add geoip and ASN attribution! And of course malware samples.
- drcongo
You know what extra data would be cool? If you hit `curl https://ip.guide/{src_ip}` and got back the ASN and country etc and added a leaderboard. In my own experiments in this area I've been gobsmacked by how much malicious traffic comes from Azure.
- arm32
Hi tusksm! It's honeypot season! Really cool project, I've been working on a honeypot project of my own right now called `honeyprompt` (https://github.com/alectrocute/honeyprompt) that utilizes LLMs to craft responses and supports multiple protocols. Having a public sink presentation layer like honeypotlive.cc was one of my next todos.
- belval
Someone instantly started spamming the bee movie's introduction. Solid pun.
- _def
fun to watch until the ssh user input exploits the web interface :P