HX
Honeypot intelligence

SSH Threat Operations

Live Cowrie session telemetry · Google Cloud
connecting
SSH sessions
—
Unique source IPs
—
Failed logins
—
Successful logins
—
Commands observed
—
Last connection
—
Global connection map
New source locations appear automatically
0 mapped locations
Waiting for telemetryLoading current connection locations…
Latest connection
Waiting…
No location yet—
Live connection feed
Newest Cowrie sessions first
— loaded
Threat concentration
Connection volume by origin
Top countries
    Top source IPs
      Credential intelligence
      Most frequently attempted values
      Usernames
        Passwords
          Observed source addresses
          Unique IPs in the current database window
            History loads from /events; new sessions arrive through /stream.