MIRAGE: Raw database dump of the Frankfurt SSH honeypot node (mirage-fra1), 2026-06-16 to 2026-07-29

Full, unredacted PostgreSQL dump (pg_dump 16.14) of the mirage-fra1 SSH honeypot node, captured 2026-07-29 before the node was decommissioned. It covers 154,806 SSH sessions from 1,844 distinct client IPs between 2026-06-16 and 2026-07-29, 156,551 authentication attempts and 9,555 commands, in five tables: sessions, commands, auth_attempts, bait_interactions and session_embeddings. Source IPs are real and not anonymized; they belong to scanning and attacking infrastructure. An anonymized export is published separately by the project. The dump includes a period of silent capture failure that the accompanying preprint audits: from 2026-06-16 04:04:42 to 2026-07-11 15:38:49 UTC the server accepted every login, so success is true on all 73,243 authentication attempts in that window and outcome is not meaningful there. There is also a 77-hour window (2026-07-18 08:01 to 2026-07-21 13:01 UTC) with no sessions. This record is byte-identical to the OSF archive (https://doi.org/10.17605/OSF.IO/JM4E7); verify with SHA256SUMS.txt. It also includes the analysis code (experiment.zip) and the SQL for the paper's figures (claims.sql). asn and country fields are not in the dump. Where the preprint uses them they come from DB-IP Lite (CC BY 4.0).