sshoney · ssh honeypot telemetry

Sessions

+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
prompt-injection probe xcommand contains: echo trader > /tmp/d.log xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
marine-curious-quollssh/exec91.92.47.66trader1141.5 KSSH-2.0-Goprobebotended2026-08-20 10:47:43
Click any column to sort, any value to filter. 1 of 1 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts