HoneypotLive - Real-time SSH bot interaction stream

Show HN: Watch bots interact with an SSH honeypot in real time

HoneypotLive offers a fascinating, real-time window into the world of automated cyberattacks by streaming live interactions with an SSH honeypot. This tool allows security enthusiasts and developers to watch bots attempt brute-force logins, execute malicious scripts, and probe for vulnerabilities as they happen. By visualizing raw connection logs, failed login attempts with common credentials, and successful intrusions where attackers try to install backdoors, it demystifies the mechanics of automated threats. It serves as an educational resource to understand current attack vectors and the relentless nature of botnets scanning the internet.

Watch bots interact with an SSH honeypot in real time to see exactly how automated attacks attempt to breach systems.
  1. micheloosterhof

    Cowrie author here! Yes this is the usual background noise on the internet! Cowrie (which I suspect is used here as well as the data generator) recently had a lot of updates, including now easy install from pip (pip install cowrie), and a much improved shell parser that’s much more capable of parsing attacker commands! https://github.com/cowrie/cowrie and get the full raw data in JSON or other formats to add geoip and ASN attribution! And of course malware samples.

  2. drcongo

    You know what extra data would be cool? If you hit `curl https://ip.guide/{src_ip}` and got back the ASN and country etc and added a leaderboard. In my own experiments in this area I've been gobsmacked by how much malicious traffic comes from Azure.

  3. arm32

    Hi tusksm! It's honeypot season! Really cool project, I've been working on a honeypot project of my own right now called `honeyprompt` (https://github.com/alectrocute/honeyprompt) that utilizes LLMs to craft responses and supports multiple protocols. Having a public sink presentation layer like honeypotlive.cc was one of my next todos.

  4. belval

    Someone instantly started spamming the bee movie's introduction. Solid pun.

  5. _def

    fun to watch until the ssh user input exploits the web interface :P

More from this day

2026-07-17