sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ captured a sample+ used a canary credential+ human+ bot
has transcript xcommand contains: cat /etc/passwd | tail -4 xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
stoic-silent-meerkatssh/exec127.0.0.1root152.0 KSSH-2.0-AsyncSSH_2.24.0—botended2026-08-20 06:34:50
Click any column to sort, any value to filter. 1 of 1 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts