Honeypot
The front door is a stage. The archive is real.
▮ listening on port 22
Real Archive
Only /pub/phrack is downloadable from the portal. Everything else is lore.
| File | Size | Download |
|---|---|---|
| Phrack.zip | 86.9 MB | get |
Real SSH
ssh root@netofschreck.duckdns.org — password honeypot.
ssh joshua@netofschreck.duckdns.org — password joshua.
Try ls -la /root/.workspace, cat /root/.workspace/.garbage,
ls /root/phrack, or run adom.
The portal records usernames, sources, methods, and results. Passwords are not captured by real sshd.
Signal Log
- Connections
- 20
- Auth attempts
- 7
- Accepted logins
- 6
- Probe target
- 172.16.0.1:22
Recent Attempts
| Time | Source | User | Method | # | Result |
|---|---|---|---|---|---|
| 2026-11-13 15:49:02 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
| 2026-11-13 15:48:26 | 80.94.92.55 | root | password | 1 | ▮ denied |
| 2026-11-13 15:48:18 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
| 2026-11-13 15:48:17 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
| 2026-11-13 15:47:23 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
| 2026-11-13 15:46:41 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
| 2026-11-13 15:46:39 | 10.0.2.2 | root | publickey | 1 | ▮ accepted |
Top Users
| User | Attempts |
|---|---|
| root | 7 |
Top Sources
| Source | Attempts |
|---|---|
| 10.0.2.2 | 6 |
| 80.94.92.55 | 1 |
Auth Methods
| Method | Attempts |
|---|---|
| publickey | 6 |
| password | 1 |
Inside GIBSON
Hackers: ls -la /root/.workspace · cat /root/.workspace/.garbage
WarGames: ssh joshua@netofschreck.duckdns.org · choose a game · Global Thermonuclear War
Phrack: ls /root/phrack · decrypt the archive with the hint in .garbage
ADOM: adom — installed for every user.