Harvesting SSH Credentials: Insights from my Honeypot Network
Summary
A security-focused piece detailing a SSH honeypot network's first 30 days of data, including attacker sources, credentials, and automation. It presents metrics such as 6,790 unique IPs, 1,531,053 total login attempts, and 131,922 unique credential pairs, with distribution insights by continent, country, and ASN. The post covers the technical setup (Ansible, WireGuard, rootless Podman) and outlines future automation and intel-sharing plans.