sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
source: 130.12.181.21 xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↓
hollow-subtle-vicunassh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-26 07:54:58
quaint-gentle-ibexssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-26 04:32:14
twilight-sunlit-roebuckssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 13:15:40
mighty-jaunty-wigeonssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 11:16:07
thorny-somber-antelopessh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 10:13:48
dutiful-fabled-dotterelssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 08:00:52
brave-regal-condorssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 07:51:44
scarlet-thorny-fireflyssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 07:41:15
fickle-clever-lemurssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 07:23:30
ivory-idle-goldfinchssh/-130.12.181.21root1——SSH-2.0-libssh_0.12.0—botended2026-08-25 07:15:19
Click any column to sort, any value to filter. 10 of 10 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts