sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human+ bot
username: sdadmin xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↓
blunt-quartz-mallardssh/-91.92.40.217sdadmin1——SSH-2.0-Go—botended2026-08-27 02:26:46
thrifty-lanky-swallowssh/exec91.92.40.217sdadmin1141.6 KSSH-2.0-Go—botended2026-08-27 02:26:42
velvet-hollow-catbirdssh/-77.239.124.249sdadmin1——SSH-2.0-Go—botended2026-08-26 13:33:28
brisk-bronzed-pheasantssh/exec77.239.124.249sdadmin1141.6 KSSH-2.0-Go—botended2026-08-26 13:33:21
knotted-pleasant-bramblingssh/-91.92.40.200sdadmin1——SSH-2.0-Go—botended2026-08-26 05:36:52
cobalt-cosmic-bluebirdssh/exec91.92.40.200sdadmin1141.6 KSSH-2.0-Go—botended2026-08-26 05:36:47
dewy-buoyant-tinamoussh/-45.153.34.165sdadmin1——SSH-2.0-Go—botended2026-08-25 02:07:29
hazy-graceful-wallabyssh/exec45.153.34.165sdadmin1141.6 KSSH-2.0-Go—botended2026-08-25 02:07:24
nameless-boreal-onagerssh/-91.92.47.11sdadmin1——SSH-2.0-Go—botended2026-08-24 08:44:54
orderly-quaint-godwitssh/-91.92.40.217sdadmin1——SSH-2.0-Go—botended2026-08-23 08:41:12
crystal-subtle-jerboassh/exec91.92.40.217sdadmin1141.6 KSSH-2.0-Go—botended2026-08-23 08:41:06
dapper-quiet-lapwingssh/exec91.92.40.124sdadmin1141.6 KSSH-2.0-Go—botended2026-08-22 12:38:09
proud-reedy-cicadassh/-91.92.42.147sdadmin1——SSH-2.0-Go—botended2026-08-21 12:44:53
shifting-verdant-minkssh/exec91.92.42.147sdadmin1141.6 KSSH-2.0-Go—botended2026-08-21 12:44:48
silent-rustic-molessh/-45.156.87.93sdadmin1——SSH-2.0-Go—botended2026-08-20 19:47:08
lively-jaunty-catbirdssh/exec45.156.87.93sdadmin1141.6 KSSH-2.0-Go—botended2026-08-20 19:47:03
ivory-painted-ferretssh/exec91.92.47.66sdadmin13220 BSSH-2.0-Go—botended2026-08-20 10:21:38
Click any column to sort, any value to filter. 17 of 17 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts