[mirai-detector honeypot] Inbound attack against our honeypot on tcp/27017 (generic).
Commands captu ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/27017 (generic).
Commands captured:
$ GET / HTTP/1.1
show less
2026-03-21T02:43:05.441533+01:00 khatuna sshd-session[875433]: pam_unix(sshd:auth): authentication f ...
show more2026-03-21T02:43:05.441533+01:00 khatuna sshd-session[875433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.167
2026-03-21T02:43:07.816832+01:00 khatuna sshd-session[875433]: Failed password for invalid user admin from 142.93.246.167 port 45486 ssh2
2026-03-21T02:43:12.102297+01:00 khatuna sshd-session[875458]: Invalid user soporte from 142.93.246.167 port 59398
2026-03-21T02:43:12.221312+01:00 khatuna sshd-session[875458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.167
2026-03-21T02:43:14.566623+01:00 khatuna sshd-session[875458]: Failed password for invalid user soporte from 142.93.246.167 port 59398 ssh2
...
show less
2026-03-20T20:42:39.028360-05:00 debian sshd[994485]: Invalid user from 142.93.246.167 port 33862
2 ...
show more2026-03-20T20:42:39.028360-05:00 debian sshd[994485]: Invalid user from 142.93.246.167 port 33862
2026-03-20T20:43:02.524283-05:00 debian sshd[994526]: Invalid user admin from 142.93.246.167 port 49152
2026-03-20T20:43:02.709670-05:00 debian sshd[994526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.167
2026-03-20T20:43:04.415636-05:00 debian sshd[994526]: Failed password for invalid user admin from 142.93.246.167 port 49152 ssh2
2026-03-20T20:43:06.369921-05:00 debian sshd[994534]: Invalid user admin from 142.93.246.167 port 54076
...
show less
2026-03-21T02:43:04.262637+01:00 n23 sshd[1749784]: Connection from 142.93.246.167 port 56084 on 92. ...
show more2026-03-21T02:43:04.262637+01:00 n23 sshd[1749784]: Connection from 142.93.246.167 port 56084 on 92.62.22.214 port 22 rdomain ""
2026-03-21T02:43:04.703314+01:00 n23 sshd[1749784]: Invalid user admin from 142.93.246.167 port 56084
...
show less
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩