sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
username: elastic xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
valiant-patient-ferretssh/exec91.92.47.66elastic13220 BSSH-2.0-Go—botended2026-08-20 10:40:16
gloomy-woven-cicadassh/exec45.156.87.93elastic1141.6 KSSH-2.0-Go—botended2026-08-20 18:35:47
cunning-dewy-civetssh/-45.156.87.93elastic1——SSH-2.0-Go—botended2026-08-20 18:35:53
mighty-emerald-owlssh/exec91.92.42.147elastic112863 BSSH-2.0-Go—botended2026-08-21 12:59:38
amber-creaky-meerkatssh/exec91.92.47.120elastic1141.6 KSSH-2.0-Go—botended2026-08-22 12:06:14
somber-meadow-peccaryssh/-91.92.47.120elastic1——SSH-2.0-Go—botended2026-08-22 12:06:20
early-somber-wheatearssh/exec91.92.47.11elastic112864 BSSH-2.0-Go—botended2026-08-24 09:50:29
fickle-creaky-slothssh/exec45.153.34.165elastic112864 BSSH-2.0-Go—botended2026-08-25 01:15:04
watchful-hollow-reindeerssh/-104.43.56.65elastic1——SSH-2.0-Go—botended2026-08-25 22:28:59
painted-brazen-bitternssh/exec104.43.56.65elastic1101.3 KSSH-2.0-Go—botended2026-08-25 22:29:30
frosty-hollow-llamassh/exec104.43.56.65elastic19617 BSSH-2.0-Go—botended2026-08-25 22:42:17
kindly-northern-nuthatchssh/exec104.43.56.65elastic19617 BSSH-2.0-Go—botended2026-08-25 22:58:24
deft-serene-agoutissh/exec91.92.40.200elastic112864 BSSH-2.0-Go—botended2026-08-26 06:46:40
feathered-dapper-vicunassh/exec77.239.124.249elastic112864 BSSH-2.0-Go—botended2026-08-26 12:34:06
proud-frank-grousessh/exec91.92.40.217elastic1141.6 KSSH-2.0-Go—botended2026-08-27 02:30:01
stoic-tender-puffinssh/-91.92.40.217elastic1——SSH-2.0-Go—botended2026-08-27 02:30:04
Click any column to sort, any value to filter. 16 of 16 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts