54 days of SSH honeypot data: 269K connections, 48K unique passwords, 28 humans
Deployed a honeypot on port 22, logged everything for 54 days. The password list alone is worth a look — `3245gs5662d34` shows up 5,000+ times (hardcoded IoT default being sprayed), and `solana`/`validator`/`node` combos make it clear someone's actively hunting crypto infrastructure.