sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
source: 4.224.40.94 xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
quaint-silent-fossassh/-4.224.40.94user0011——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:02:17
hazel-thawing-goldcrestssh/-4.224.40.94root1——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:08:04
smooth-muted-gullssh/-4.224.40.94345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:10:43
airy-brave-wolverinessh/-4.224.40.94ftpuser1——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:10:46
wiry-austere-skinkssh/exec4.224.40.94ftpuser15704 BSSH-2.0-libssh_0.9.6—botended2026-08-23 16:10:49
whispering-dusty-elkssh/-4.224.40.94345gs5662d341——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:13:20
smooth-bold-moorhenssh/-4.224.40.94mailuser1——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:13:23
hazy-salty-gibbonssh/-4.224.40.94mailuser1——SSH-2.0-libssh_0.9.6—botended2026-08-23 16:13:38
inland-ashen-capuchinssh/exec4.224.40.94mailuser1273.9 KSSH-2.0-libssh_0.9.6—botended2026-08-23 16:13:55
brazen-brave-jaguarssh/-4.224.40.94—0————unknownended2026-08-23 18:26:41
Click any column to sort, any value to filter. 10 of 10 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts