Hi tusksm! It's honeypot season! Really cool project, I've been working on a honeypot project of my own right now called `honeyprompt` (https://github.com/alectrocute/honeyprompt) that utilizes LLMs to craft responses and supports multiple protocols. Having a public sink presentation layer like honeypotlive.cc was one of my next todos.

Yeah I have an SSH daemon running on the default port at funky.nondeterministic.computer for people to hit, but it's mostly bots, which is no fun.

fun to watch until the ssh user input exploits the web interface :P

Its always wild seeing the sheer volume of background noice on public IPs. Fun project.

Someone instantly started spamming the bee movie's introduction. Solid pun.

Very cool! Adding a client geo would be nice (even if its not very accurate)

For the sake of interest you could try to expose periodically rotated keyed hashes of IPs and credentials instead of the raw values. It would still let people correlate events within a limited time window

You know what extra data would be cool? If you hit `curl https://ip.guide/{src_ip}` and got back the ASN and country etc and added a leaderboard. In my own experiments in this area I've been gobsmacked by how much malicious traffic comes from Azure.

  80% of malicious traffic comes from Azure.
  10% from Digital Ocean.
  5% from AWS.
  5% from GCP.

reminds me of https://xkcd.com/350/

Watching the first few minutes was more educational than I expected.