HX
Honeypot intelligence
SSH Threat Operations
Live Cowrie session telemetry · Google Cloud
Refresh
connecting
SSH sessions
—
Unique source IPs
—
Failed logins
—
Successful logins
—
Commands observed
—
Last connection
—
Global connection map
New source locations appear automatically
0 mapped locations
Waiting for telemetry
Loading current connection locations…
Latest connection
Waiting…
No location yet
—
Live connection feed
Newest Cowrie sessions first
—
loaded
No connections recorded yet.
Threat concentration
Connection volume by origin
Top countries
No data yet.
Top source IPs
No data yet.
Credential intelligence
Most frequently attempted values
Usernames
No attempts yet.
Passwords
No attempts yet.
Observed source addresses
Unique IPs in the current database window
No IPs yet.
History loads from
/events
; new sessions arrive through
/stream
.