Issued
1
Used over SSH
0
Handoffs
0
Burn rate
0%
Canary credentials
Each visitor to the admin console is handed a unique SSH credential pair planted in an exposed config file. When one later appears on the SSH honeypot, the scrape and the intrusion are provably the same operation. A handoff means the address that scraped the credential is not the address that used it.
| user | password | scraped by | via | ssh from | lag ↓ | verdict |
|---|---|---|---|---|---|---|
| db_backup | 6xRViiHRnt | 71.247.166.17 | / | — | — | — |
Click any column to sort. Lag is the delay between the
credential being scraped and first used over SSH.