sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
source: 194.156.249.154 xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
craggy-orderly-grousessh/-194.156.249.154dev1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:26:57
coastal-wooded-addaxssh/-194.156.249.154root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:32:03
hazy-russet-penguinssh/-194.156.249.154345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:34:22
tawny-gritty-grebessh/-194.156.249.154root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:34:24
ivory-pristine-sandpiperssh/exec194.156.249.154root1182.8 KSSH-2.0-libssh_0.9.6—botended2026-08-20 12:34:39
fabled-bitter-toucanssh/-194.156.249.154root1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:34:42
upland-dappled-hoopoessh/-194.156.249.154345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:36:29
reedy-leafy-woodcockssh/-194.156.249.154socks1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:36:31
brisk-frosty-yakssh/-194.156.249.154socks1——SSH-2.0-libssh_0.9.6—botended2026-08-20 12:36:46
ashen-cunning-gadwallssh/exec194.156.249.154socks1273.6 KSSH-2.0-libssh_0.9.6—botended2026-08-20 12:37:01
wiry-pleasant-wrenssh/-194.156.249.154—0————unknownended2026-08-20 14:20:08
Click any column to sort, any value to filter. 11 of 11 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts