sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ captured a sample+ used a canary credential+ human+ bot
has transcript xcommand contains: echo P@ssw0rd > /tmp/d.log xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
curious-marbled-elkssh/exec91.92.47.66ftpuser1141.6 KSSH-2.0-Goprobebotended2026-08-20 10:02:18
lanky-somber-cardinalssh/exec91.92.47.66labuser1141.6 KSSH-2.0-Go—botended2026-08-20 10:15:23
muted-hushed-ocelotssh/exec91.92.47.66core1141.5 KSSH-2.0-Go—botended2026-08-20 10:39:19
crimson-lucid-curlewssh/exec45.156.87.93ftpuser1141.6 KSSH-2.0-Go—botended2026-08-20 18:27:51
orderly-dusky-fennecssh/exec91.92.42.147labuser1141.6 KSSH-2.0-Go—botended2026-08-21 12:44:05
peaty-knotted-ibisssh/exec91.92.42.147core1141.6 KSSH-2.0-Go—botended2026-08-21 13:11:59
icy-placid-eiderssh/exec91.92.47.11core1141.6 KSSH-2.0-Go—botended2026-08-24 09:26:55
woven-glassy-galagossh/exec45.153.34.165core1141.6 KSSH-2.0-Go—botended2026-08-25 02:05:19
placid-prairie-lynxssh/exec91.92.40.200core1141.6 KSSH-2.0-Go—botended2026-08-26 06:43:49
craggy-polar-ternssh/exec77.239.124.249core1141.6 KSSH-2.0-Go—botended2026-08-26 13:44:18
tangled-coral-saolassh/exec91.92.40.217core1141.6 KSSH-2.0-Go—botended2026-08-27 03:14:48
Click any column to sort, any value to filter. 11 of 11 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts