What we know
Medium-interaction SSH honeypot that simulates users and a shell to observe attacker commands; it documents downloading requested files to a separate directory for analysis.
Evidence limits
The described behavior is documented, not independently verified.
Sources and provenance
- madirish/kojoney2 repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.