sshoney
· ssh honeypot telemetry
Overview
Sessions
Commands
Samples
Canaries
Credentials
About
Sessions
any driver
bot
human
unknown
any protocol
ssh
http
any channel
shell
exec
sftp
http
filter
+ prompt-injection probe
+ live
+ has transcript
+ captured a sample
+ used a canary credential
+ human
source: 5.9.50.77
x
driver: bot
x
clear all
session
kind
source
user
auth
cmds
transcript
client
flags
driver
status
started ↑
fearless-balmy-marten
http/http
5.9.50.77
—
0
—
—
Mozilla/5.0 (Windows NT 10.0;
—
bot
ended
2026-08-21 13:01:44
Click any column to sort, any value to filter. 1 of 1 loaded — scroll for more.
export this view:
CSV
JSON
JSONL + transcripts