sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
source: 20.102.98.53 xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
somber-pleasant-ternssh/-20.102.98.53root1——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:43:53
wry-whispering-tamarinssh/-20.102.98.53alex1——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:46:51
crystal-crisp-egretssh/-20.102.98.53teste1——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:49:14
pleasant-amiable-badgerssh/-20.102.98.53345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:51:53
stoic-orderly-gharialssh/-20.102.98.53root1——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:51:54
fabled-vaulted-gharialssh/-20.102.98.53root1——SSH-2.0-libssh_0.9.6—botended2026-08-23 04:51:59
earnest-rambling-ocelotssh/exec20.102.98.53root1273.5 KSSH-2.0-libssh_0.9.6—botended2026-08-23 04:52:11
austere-tender-oriolessh/-20.102.98.53ubuntu1——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:40:40
rapid-twilight-goshawkssh/-20.102.98.53george1——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:46:10
loyal-burly-thrushssh/-20.102.98.53cod2server1——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:48:20
deft-grassy-fennecssh/-20.102.98.53345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:50:46
idle-dusty-cuckoossh/-20.102.98.53es11——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:50:47
northern-slender-woodchuckssh/-20.102.98.53es11——SSH-2.0-libssh_0.9.6—botended2026-08-25 09:50:53
scarlet-candid-reindeerssh/exec20.102.98.53es11273.2 KSSH-2.0-libssh_0.9.6—botended2026-08-25 09:51:04
Click any column to sort, any value to filter. 14 of 14 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts