sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
username: airflow xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
civil-craggy-blackbirdssh/exec91.92.47.66airflow13220 BSSH-2.0-Go—botended2026-08-20 11:00:27
sunlit-western-anteaterssh/exec45.156.87.93airflow1141.6 KSSH-2.0-Go—botended2026-08-20 19:22:47
vaulted-diligent-sparrowssh/-45.156.87.93airflow1——SSH-2.0-Go—botended2026-08-20 19:22:51
feathered-hazy-ocelotssh/exec91.92.42.147airflow1141.6 KSSH-2.0-Go—botended2026-08-21 13:18:08
lanky-quaint-cormorantssh/-91.92.42.147airflow1——SSH-2.0-Go—botended2026-08-21 13:18:14
ashen-polar-vulturessh/exec91.92.47.11airflow1141.6 KSSH-2.0-Go—botended2026-08-24 09:55:11
foggy-flinty-goldfinchssh/-91.92.47.11airflow1——SSH-2.0-Go—botended2026-08-24 09:55:15
marbled-bashful-bluebirdssh/exec45.153.34.165airflow1141.6 KSSH-2.0-Go—botended2026-08-25 02:06:36
nameless-barren-catbirdssh/-45.153.34.165airflow1——SSH-2.0-Go—botended2026-08-25 02:06:41
jagged-silent-mallardssh/exec91.92.40.200airflow1141.6 KSSH-2.0-Go—botended2026-08-26 06:17:44
jovial-early-bullfinchssh/-91.92.40.200airflow1——SSH-2.0-Go—botended2026-08-26 06:17:50
arctic-solemn-chinchillassh/exec77.239.124.249airflow1141.6 KSSH-2.0-Go—botended2026-08-26 14:28:44
proud-upland-warblerssh/-77.239.124.249airflow1——SSH-2.0-Go—botended2026-08-26 14:28:48
gallant-dusty-crossbillssh/exec91.92.40.217airflow1141.6 KSSH-2.0-Go—botended2026-08-27 02:59:31
umber-proud-storkssh/-91.92.40.217airflow1——SSH-2.0-Go—botended2026-08-27 02:59:35
airy-wiry-gullssh/exec2.57.122.53airflow17738 BSSH-2.0-Go—botended2026-08-27 10:51:32
Click any column to sort, any value to filter. 16 of 16 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts