HoneyOpus Hub

Live attack feed

Real-time captures from public HoneyOpus honeypots around the world.

Attacks · 24h19
Unique IPs · 24h11
Active honeypots1
Public users1

Recent attacks

WhenProtoSourceGeoCreds AuthCmdsProfile Reporter
2m ago telnet 93.123.72.166
:45756
 🇳🇱Netherlands · Amsterdam
Amarutu Technology Ltd
 guest / 12345 no 0 scanner 75% Kappa view
3m ago telnet 38.183.152.42
:52862
 🇩🇴Dominican Republic · Bella Vista
INVERSIONES BONAFER, S.R.L
 root / hg2x0 no 0 creds-probe 70% Kappa view
4m ago telnet 49.88.156.34
:42975
 🇨🇳China · Nanjing
Chinanet
 / no 0 creds-probe 70% Kappa view
8m ago telnet 158.220.115.135
:56402
 🇫🇷France · Lauterbourg
Contabo GmbH
 system / shell yes 2 scanner 40% Kappa view
8m ago telnet 93.123.72.166
:44898
 🇳🇱Netherlands · Amsterdam
Amarutu Technology Ltd
 root / admintelecom1 no 0 creds-probe 70% Kappa view
13m ago telnet 158.220.115.135
:58506
 🇫🇷France · Lauterbourg
Contabo GmbH
 system / shell yes 2 scanner 40% Kappa view
14m ago telnet 93.123.72.166
:39420
 🇳🇱Netherlands · Amsterdam
Amarutu Technology Ltd
 root / admintelecom1 no 0 creds-probe 70% Kappa view
14m ago ssh 161.35.230.183
:59854
 🇺🇸United States · Santa Clara
DigitalOcean, LLC
 / no 0 — Kappa view
20m ago telnet 93.123.72.166
:37942
 🇳🇱Netherlands · Amsterdam
Amarutu Technology Ltd
 root / admintelecom1 no 0 creds-probe 70% Kappa view
22m ago telnet 122.231.61.4
:53255
 🇨🇳China · Hangzhou
Chinanet
 / no 0 creds-probe 70% Kappa view
23m ago telnet 72.255.32.192
:43293
 🇵🇰Pakistan · Lahore
Cyber Internet Services (Private) Limited
 admin / v2mprt no 0 creds-probe 70% Kappa view
24m ago telnet 158.220.115.135
:42858
 🇫🇷France · Lauterbourg
Contabo GmbH
 system / shell yes 2 scanner 40% Kappa view
26m ago telnet 93.123.72.166
:45150
 🇳🇱Netherlands · Amsterdam
Amarutu Technology Ltd
 root / admintelecom1 no 0 creds-probe 70% Kappa view
27m ago telnet 210.3.66.59
:33916
 🇭🇰Hong Kong · Mid Levels
HGC Global Communications Limited
 system / shell yes 2 scanner 40% Kappa view
28m ago telnet 212.237.175.15
:64450
 🇩🇪Germany · Ulm
SWU TeleNet GmbH
 shell / sh yes 0 creds-only 60% Kappa view
28m ago telnet 212.237.175.104
:65176
 🇩🇪Germany · Ulm
SWU TeleNet GmbH
 shell / sh yes 0 creds-only 60% Kappa view
28m ago telnet 72.255.32.192
:43391
 🇵🇰Pakistan · Lahore
Cyber Internet Services (Private) Limited
 admin / 12345 no 0 scanner 75% Kappa view
30m ago telnet 36.25.48.181
:40408
 🇨🇳China · Jinhua
Chinanet
 root / star123 no 0 creds-probe 70% Kappa view
30m ago telnet 158.220.115.135
:34928
 🇫🇷France · Lauterbourg
Contabo GmbH
 system / shell yes 2 scanner 40% Kappa view

Public reporters

UserAttacks · 24h
Kappa 19 view feed

Run your own honeypot

HoneyOpus is a tiny SSH / Telnet honeypot that runs on a handful of cheap ESP32 boards. Plug one in, point its dashboard at this hub, and your captures show up here automatically.

Supported boards

BoardMCUDisplayNotes
ESP32-C3 SuperMini OLED esp32-c3 0.42″ mono SSD1306 (72×40) Original platform; the cheapest entry point at ~$4.
LilyGO T-QT Pro esp32-s3 1.14″ colour IPS (128×128) Bigger panel, animated attack icons.
ESP32-S3-N16R8 esp32-s3 headless 16 MB flash + 8 MB PSRAM — keeps long asciinema casts.

Source & flashing instructions: github.com/KaSt/HoneyOpus. No email, no recovery, no nonsense: create an account to get started.

HoneyOpus Hub · open feed: / · API: /api · ingest contract: /about · firmware: github.com/KaSt/HoneyOpus