sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
username: ghost xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
thawing-painted-gharialssh/exec91.92.47.66ghost13220 BSSH-2.0-Go—botended2026-08-20 10:19:18
shifting-restless-wombatssh/exec45.156.87.93ghost1141.6 KSSH-2.0-Go—botended2026-08-20 19:03:36
meadow-lonesome-wigeonssh/-45.156.87.93ghost1——SSH-2.0-Go—botended2026-08-20 19:03:42
mellow-ashen-wrenssh/exec91.92.42.147ghost1141.6 KSSH-2.0-Go—botended2026-08-21 13:18:50
pewter-nautical-linnetssh/-91.92.42.147ghost1——SSH-2.0-Go—botended2026-08-21 13:18:55
civil-lunar-skuassh/exec91.92.47.11ghost1141.6 KSSH-2.0-Go—botended2026-08-24 09:34:02
muted-drifting-yakssh/-91.92.47.11ghost1——SSH-2.0-Go—botended2026-08-24 09:34:05
lawful-hidden-llamassh/-113.161.222.150ghost1——SSH-2.0-libssh_0.9.6—botended2026-08-24 23:23:29
hazy-craggy-kestrelssh/exec45.153.34.165ghost1141.6 KSSH-2.0-Go—botended2026-08-25 01:37:31
dapper-feral-avocetssh/-45.153.34.165ghost1——SSH-2.0-Go—botended2026-08-25 01:37:35
bashful-woven-waxwingssh/exec91.92.40.200ghost1141.6 KSSH-2.0-Go—botended2026-08-26 06:46:17
genial-earnest-boarssh/exec77.239.124.249ghost1141.6 KSSH-2.0-Go—botended2026-08-26 14:18:45
proud-arctic-tamarinssh/-77.239.124.249ghost1——SSH-2.0-Go—botended2026-08-26 14:18:50
stormy-deft-shrikessh/exec91.92.40.217ghost1141.6 KSSH-2.0-Go—botended2026-08-27 03:12:49
alpine-lofty-albatrossssh/-91.92.40.217ghost1——SSH-2.0-Go—botended2026-08-27 03:12:55
Click any column to sort, any value to filter. 15 of 15 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts