sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: bernard xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
watchful-dusky-cuckoossh/exec91.92.47.66bernard1141.6 KSSH-2.0-Go—botended2026-08-20 10:35:59
grassy-quiet-merlinssh/-91.92.47.66bernard1——SSH-2.0-Go—botended2026-08-20 10:36:00
brave-supple-skylarkssh/exec45.156.87.93bernard1141.6 KSSH-2.0-Go—botended2026-08-20 19:14:11
woven-prickly-gullssh/-45.156.87.93bernard1——SSH-2.0-Go—botended2026-08-20 19:14:15
fearless-stoic-wolverinessh/exec91.92.42.147bernard1141.6 KSSH-2.0-Go—botended2026-08-21 13:16:00
gnarled-hazel-badgerssh/-91.92.42.147bernard1——SSH-2.0-Go—botended2026-08-21 13:16:06
lanky-tangled-larkssh/exec91.92.47.11bernard1141.6 KSSH-2.0-Go—botended2026-08-24 09:33:08
clever-jaunty-agoutissh/-91.92.47.11bernard1——SSH-2.0-Go—botended2026-08-24 09:33:15
airy-hushed-bonobossh/exec45.153.34.165bernard1141.6 KSSH-2.0-Go—botended2026-08-25 01:42:41
northern-languid-gerbilssh/-45.153.34.165bernard1——SSH-2.0-Go—botended2026-08-25 01:42:45
valiant-wry-kiwissh/exec91.92.40.200bernard1141.6 KSSH-2.0-Go—botended2026-08-26 06:25:54
eager-flinty-chamoisssh/-91.92.40.200bernard1——SSH-2.0-Go—botended2026-08-26 06:25:58
zealous-twilight-godwitssh/exec77.239.124.249bernard1141.6 KSSH-2.0-Go—botended2026-08-26 12:39:59
ancient-lofty-macawssh/-77.239.124.249bernard1——SSH-2.0-Go—botended2026-08-26 12:40:06
emerald-fleeting-blackbirdssh/exec91.92.40.217bernard1141.6 KSSH-2.0-Go—botended2026-08-27 02:19:06
placid-arctic-quokkassh/-91.92.40.217bernard1——SSH-2.0-Go—botended2026-08-27 02:19:11
Click any column to sort, any value to filter. 16 of 16 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts