sshoney · ssh honeypot telemetry

Sessions

+ prompt-injection probe+ live+ has transcript+ captured a sample+ used a canary credential+ human
username: esroot xdriver: bot xclear all
sessionkindsourceuserauthcmdstranscriptclientflagsdriverstatusstarted ↓
gleaming-vivid-onagerssh/-91.92.40.217esroot1——SSH-2.0-Go—botended2026-08-27 02:07:08
wooded-tender-macawssh/exec91.92.40.217esroot1141.6 KSSH-2.0-Go—botended2026-08-27 02:07:04
proud-foggy-fieldfaressh/-77.239.124.249esroot1——SSH-2.0-Go—botended2026-08-26 12:55:35
spirited-frank-jayssh/exec77.239.124.249esroot1141.6 KSSH-2.0-Go—botended2026-08-26 12:55:29
merry-bitter-ocelotssh/exec91.92.40.200esroot1141.6 KSSH-2.0-Go—botended2026-08-26 05:45:49
blazing-shaded-boarssh/exec104.43.56.65esroot1101.3 KSSH-2.0-Go—botended2026-08-25 22:09:00
airy-creaky-hedgehogssh/-104.43.56.65esroot1——SSH-2.0-Go—botended2026-08-25 22:08:29
airy-smoky-erminessh/-45.153.34.165esroot1——SSH-2.0-Go—botended2026-08-25 02:02:02
sincere-silent-skuassh/exec45.153.34.165esroot1141.6 KSSH-2.0-Go—botended2026-08-25 02:01:56
grassy-whispering-wheatearssh/-91.92.47.11esroot1——SSH-2.0-Go—botended2026-08-24 10:11:08
canny-ruddy-walrusssh/exec91.92.47.11esroot1141.6 KSSH-2.0-Go—botended2026-08-24 10:11:04
arctic-fabled-wagtailssh/-91.92.40.217esroot1——SSH-2.0-Go—botended2026-08-23 08:34:51
zealous-burly-pangolinssh/exec91.92.40.217esroot1141.6 KSSH-2.0-Go—botended2026-08-23 08:34:49
Click any column to sort, any value to filter. 13 of 13 loaded — scroll for more.
export this view:CSVJSONJSONL + transcripts