sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: codex xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
supple-frosty-adderssh/exec2.57.122.53codex17836 BSSH-2.0-Go—botended2026-08-21 11:40:05
crisp-rambling-starlingssh/exec2.57.122.53codex17835 BSSH-2.0-Go—botended2026-08-22 14:43:18
subtle-courtly-gerbilssh/exec91.92.47.11codex1141.6 KSSH-2.0-Go—botended2026-08-24 10:01:16
sleepy-forlorn-gharialssh/-91.92.47.11codex1——SSH-2.0-Go—botended2026-08-24 10:01:19
rambling-fierce-koalassh/exec45.153.34.165codex1141.6 KSSH-2.0-Go—botended2026-08-25 01:17:20
dutiful-ashen-minkssh/-45.153.34.165codex1——SSH-2.0-Go—botended2026-08-25 01:17:23
blithe-umber-bobcatssh/exec91.92.40.200codex1141.6 KSSH-2.0-Go—botended2026-08-26 06:17:13
fleeting-blithe-cougarssh/exec77.239.124.249codex1141.6 KSSH-2.0-Go—botended2026-08-26 14:16:24
rugged-fierce-puffinssh/-77.239.124.249codex1——SSH-2.0-Go—botended2026-08-26 14:16:31
velvet-northern-wagtailssh/exec91.92.40.217codex1141.6 KSSH-2.0-Go—botended2026-08-27 02:43:50
cunning-glacial-penguinssh/-91.92.40.217codex1——SSH-2.0-Go—botended2026-08-27 02:43:55
northern-mellow-caracalssh/exec2.57.122.53codex17738 BSSH-2.0-Go—botended2026-08-27 12:40:48
Click any column to sort, any value to filter. 12 of 12 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts