sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
username: zlm xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
feral-sleepy-cardinalssh/exec91.92.47.120zlm1141.6 KSSH-2.0-Go—botended2026-08-22 12:03:12
obsidian-sandy-wagtailssh/exec91.92.40.124zlm15276 BSSH-2.0-Go—botended2026-08-22 12:39:32
graceful-reedy-skinkssh/exec91.92.47.11zlm1141.6 KSSH-2.0-Go—botended2026-08-24 10:08:42
meadow-graceful-mongoosessh/-91.92.47.11zlm1——SSH-2.0-Go—botended2026-08-24 10:08:49
frank-reedy-cassowaryssh/exec45.153.34.165zlm1141.6 KSSH-2.0-Go—botended2026-08-25 01:55:56
fickle-feathered-capuchinssh/-45.153.34.165zlm1——SSH-2.0-Go—botended2026-08-25 01:56:00
honest-fearless-wigeonssh/exec91.92.40.200zlm1141.6 KSSH-2.0-Go—botended2026-08-26 06:43:31
calm-wry-koalassh/-91.92.40.200zlm1——SSH-2.0-Go—botended2026-08-26 06:43:35
glassy-fringed-erminessh/exec77.239.124.249zlm1141.6 KSSH-2.0-Go—botended2026-08-26 12:29:58
icy-misty-jackdawssh/-77.239.124.249zlm1——SSH-2.0-Go—botended2026-08-26 12:30:04
austere-patient-woodchuckssh/exec91.92.40.217zlm1141.6 KSSH-2.0-Go—botended2026-08-27 02:46:04
deft-quaint-egretssh/-91.92.40.217zlm1——SSH-2.0-Go—botended2026-08-27 02:46:08
Click any column to sort, any value to filter. 12 of 12 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts