What Hit My Honeypot in a Week ?
Over seven days, my Linux honeypot recorded 108,114 sessions, 21,038 commands, and 15 unique payloads. What first looked like routine Mirai-era noise led to a coordinated RedTail/XMRig deployment involving SSH scanning, rival-miner cleanup, and persistence.