Honeypot Live

"This exists because the constant background noise of automated attacks stays invisible to almost everyone."

Streams live telemetry from the operator's SSH honeypot — source IPs, attempted usernames and passwords, commands run, client fingerprints — as events arrive, filterable by source and event type.

Our takeWatching the same three passwords get tried over and over teaches more than most security posts. The site is upfront that an IP may be a compromised host rather than an attacker, which I appreciate. More engrossing than it sounds.