sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: recorder xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↑
crimson-airy-redshankssh/exec91.92.47.120recorder1141.6 KSSH-2.0-Go—botended2026-08-22 12:18:09
amiable-rustic-pikassh/-91.92.47.120recorder1——SSH-2.0-Go—botended2026-08-22 12:18:16
coral-thrifty-volessh/exec91.92.47.11recorder1141.6 KSSH-2.0-Go—botended2026-08-24 09:43:09
whispering-murky-wombatssh/-91.92.47.11recorder1——SSH-2.0-Go—botended2026-08-24 09:43:15
languid-woven-polecatssh/exec45.153.34.165recorder1141.6 KSSH-2.0-Go—botended2026-08-25 00:56:33
vaulted-oaken-bonobossh/-45.153.34.165recorder1——SSH-2.0-Go—botended2026-08-25 00:56:36
graceful-dapper-godwitssh/exec91.92.40.200recorder1141.6 KSSH-2.0-Go—botended2026-08-26 06:41:14
meadow-stoic-bluebirdssh/-91.92.40.200recorder1——SSH-2.0-Go—botended2026-08-26 06:41:18
windswept-creaky-dunlinssh/exec77.239.124.249recorder1141.6 KSSH-2.0-Go—botended2026-08-26 13:37:47
sullen-forlorn-cardinalssh/-77.239.124.249recorder1——SSH-2.0-Go—botended2026-08-26 13:37:52
patient-bold-haressh/exec91.92.40.217recorder1141.6 KSSH-2.0-Go—botended2026-08-27 03:04:32
sandy-buoyant-barbetssh/-91.92.40.217recorder1——SSH-2.0-Go—botended2026-08-27 03:04:37
Click any column to sort, any value to filter. 12 of 12 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts