sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: hduser xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
graceful-sandy-hamsterssh/exec91.92.47.66hduser1141.5 KSSH-2.0-Go—botended2026-08-20 10:25:55
plush-vigilant-cariboussh/-91.92.47.66hduser1——SSH-2.0-Go—botended2026-08-20 10:25:56
autumn-civil-cranessh/-45.156.87.93hduser1——SSH-2.0-Go—botended2026-08-20 18:24:21
cunning-vigilant-agoutissh/exec91.92.42.147hduser1141.6 KSSH-2.0-Go—botended2026-08-21 13:45:27
blunt-coastal-cardinalssh/-91.92.42.147hduser1——SSH-2.0-Go—botended2026-08-21 13:45:33
rugged-dusky-redshankssh/exec91.92.47.11hduser1141.6 KSSH-2.0-Go—botended2026-08-24 09:53:27
gloomy-grumpy-wrenssh/-91.92.47.11hduser1——SSH-2.0-Go—botended2026-08-24 09:53:34
mighty-peaty-quailssh/exec45.153.34.165hduser1141.6 KSSH-2.0-Go—botended2026-08-25 01:22:23
jolly-curious-antelopessh/-45.153.34.165hduser1——SSH-2.0-Go—botended2026-08-25 01:22:26
misty-ginger-cranessh/exec91.92.40.200hduser1141.6 KSSH-2.0-Go—botended2026-08-26 06:26:37
murky-mottled-quokkassh/-91.92.40.200hduser1——SSH-2.0-Go—botended2026-08-26 06:26:43
marine-oaken-skuassh/exec77.239.124.249hduser1141.6 KSSH-2.0-Go—botended2026-08-26 13:35:32
candid-shaded-curlewssh/-77.239.124.249hduser1——SSH-2.0-Go—botended2026-08-26 13:35:36
solar-lively-buntingssh/exec91.92.40.217hduser1141.6 KSSH-2.0-Go—botended2026-08-27 02:37:51
ginger-indigo-yakssh/-46.253.45.10hduser1——SSH-2.0-libssh_0.9.6—botended2026-08-27 07:57:31
stoic-nameless-thrushssh/exec46.253.45.10hduser1182.2 KSSH-2.0-libssh_0.9.6—botended2026-08-27 07:57:46
Click any column to sort, any value to filter. 16 of 16 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts