HX
Honeypot intelligence

SSH Threat Operations

Public, redacted telemetry from the Cowrie sensor
Connecting
SSH sessions
—
Unique source IPs
—
Failed logins
—
Successful logins
—
Commands observed
—
Last connection
—

Global connection map

Each marker is a geolocated source address.
Loading locations…
Connecting to telemetryFetching live source locations…

Threat concentration

Connection volume by geographic origin
Top countries
    Top source IPs

      Event signals

      Event categories in the current window

      Observed source addresses

      Unique IPs in the loaded telemetry window