sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: mohammad xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
regal-keen-moosessh/exec91.92.47.66mohammad1141.8 KSSH-2.0-Go—botended2026-08-20 10:08:47
civil-sincere-bisonssh/-91.92.47.66mohammad1——SSH-2.0-Go—botended2026-08-20 10:08:48
breezy-gilded-bisonssh/exec45.156.87.93mohammad1141.6 KSSH-2.0-Go—botended2026-08-20 19:20:51
bold-tranquil-wallabyssh/-45.156.87.93mohammad1——SSH-2.0-Go—botended2026-08-20 19:20:56
creaky-wry-guanacossh/exec91.92.42.147mohammad1141.6 KSSH-2.0-Go—botended2026-08-21 13:44:47
cobalt-sincere-meerkatssh/-91.92.42.147mohammad1——SSH-2.0-Go—botended2026-08-21 13:44:54
ancient-tidal-albatrossssh/exec91.92.47.11mohammad1141.6 KSSH-2.0-Go—botended2026-08-24 09:48:43
pleasant-airy-pantherssh/-91.92.47.11mohammad1——SSH-2.0-Go—botended2026-08-24 09:48:49
tangled-languid-antelopessh/exec45.153.34.165mohammad1141.6 KSSH-2.0-Go—botended2026-08-25 02:13:24
wry-somber-anteaterssh/-45.153.34.165mohammad1——SSH-2.0-Go—botended2026-08-25 02:13:30
lawful-electric-walrusssh/exec91.92.40.200mohammad1141.6 KSSH-2.0-Go—botended2026-08-26 06:25:23
supple-somber-quailssh/-91.92.40.200mohammad1——SSH-2.0-Go—botended2026-08-26 06:25:26
solar-fleeting-dingossh/exec77.239.124.249mohammad1141.6 KSSH-2.0-Go—botended2026-08-26 14:20:01
polar-muted-kingfisherssh/-77.239.124.249mohammad1——SSH-2.0-Go—botended2026-08-26 14:20:08
early-buoyant-fieldfaressh/exec91.92.40.217mohammad1141.6 KSSH-2.0-Go—botended2026-08-27 03:09:47
lanky-orderly-hornbillssh/-91.92.40.217mohammad1——SSH-2.0-Go—botended2026-08-27 03:09:52
Click any column to sort, any value to filter. 16 of 16 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts