sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: ftpuser1 xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
brave-candid-ternssh/-78.109.200.147ftpuser11——SSH-2.0-libssh_0.9.6—botended2026-08-20 09:18:46
primal-mottled-reindeerssh/exec91.92.47.66ftpuser11141.5 KSSH-2.0-Go—botended2026-08-20 11:02:12
scarlet-plush-bisonssh/-91.92.47.66ftpuser11——SSH-2.0-Go—botended2026-08-20 11:02:13
blithe-dewy-eiderssh/exec45.156.87.93ftpuser11141.6 KSSH-2.0-Go—botended2026-08-20 18:55:31
tidal-amber-rookssh/-45.156.87.93ftpuser11——SSH-2.0-Go—botended2026-08-20 18:55:37
ashen-creaky-warblerssh/exec91.92.42.147ftpuser11141.6 KSSH-2.0-Go—botended2026-08-21 13:03:33
craggy-tender-siskinssh/exec91.92.40.217ftpuser11141.6 KSSH-2.0-Go—botended2026-08-23 08:40:50
diligent-sterling-heronssh/-91.92.40.217ftpuser11——SSH-2.0-Go—botended2026-08-23 08:40:55
rugged-gnarled-tinamoussh/exec91.92.47.11ftpuser11141.6 KSSH-2.0-Go—botended2026-08-24 10:11:29
fierce-burly-dingossh/-91.92.47.11ftpuser11——SSH-2.0-Go—botended2026-08-24 10:11:34
diligent-alpine-gibbonssh/exec45.153.34.165ftpuser11141.6 KSSH-2.0-Go—botended2026-08-25 01:53:05
silent-tawny-cheetahssh/-45.153.34.165ftpuser11——SSH-2.0-Go—botended2026-08-25 01:53:08
woven-solemn-porcupinessh/exec91.92.40.200ftpuser11141.6 KSSH-2.0-Go—botended2026-08-26 06:43:24
grassy-faded-larkssh/exec77.239.124.249ftpuser11141.6 KSSH-2.0-Go—botended2026-08-26 11:56:22
electric-cunning-ptarmiganssh/-77.239.124.249ftpuser11——SSH-2.0-Go—botended2026-08-26 11:56:27
zealous-indigo-ibexssh/exec91.92.40.217ftpuser11141.6 KSSH-2.0-Go—botended2026-08-27 02:45:11
stormy-forlorn-bowerbirdssh/-91.92.40.217ftpuser11——SSH-2.0-Go—botended2026-08-27 02:45:18
Click any column to sort, any value to filter. 17 of 17 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts