sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
source: 120.48.90.166 xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
daring-proud-martenssh/-120.48.90.166dee1——SSH-2.0-libssh_0.9.6—botended2026-08-20 05:31:38
flinty-cosmic-petrelssh/-120.48.90.166jimmy1——SSH-2.0-libssh_0.9.6—botended2026-08-20 05:43:12
cobalt-daring-tapirssh/-120.48.90.166root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 05:47:06
faded-sunlit-ocelotssh/-120.48.90.166git1——SSH-2.0-libssh_0.9.6—botended2026-08-20 05:51:01
arctic-jolly-tapirssh/-120.48.90.166—0——SSH-2.0-libssh_0.9.6—botended2026-08-20 05:54:54
silent-lunar-gibbonssh/-120.48.90.166teamspeak31——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:10:45
crimson-fabled-wombatssh/-120.48.90.166root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:22:51
wandering-electric-magpiessh/-120.48.90.166root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:26:54
ancient-daring-manateessh/-120.48.90.166—0——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:35:08
candid-keen-gibbonssh/-120.48.90.166—0——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:47:15
languid-stoic-pikassh/-120.48.90.166—0——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:51:13
idle-gilded-tapirssh/-120.48.90.166ubuntu1——SSH-2.0-libssh_0.9.6—botended2026-08-20 06:55:09
daring-wistful-tealssh/-120.48.90.166null1——SSH-2.0-libssh_0.9.6—botended2026-08-20 07:02:43
nimble-amber-narwhalssh/-120.48.90.166deploy1——SSH-2.0-libssh_0.9.6—botended2026-08-20 07:10:19
dusky-solar-lynxssh/-120.48.90.166root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 07:14:10
dusky-polar-finchssh/exec120.48.90.166sql1168 BSSH-2.0-libssh_0.9.6—botended2026-08-20 07:18:01
solar-daring-pikassh/-120.48.90.166—0——SSH-2.0-libssh_0.9.6—botended2026-08-20 07:25:46
Click any column to sort, any value to filter. 17 of 17 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts