[mirai-detector honeypot] Inbound attack against our honeypot on tcp/21 (ftp).
Commands captured:
...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/21 (ftp).
Commands captured:
$ SYST
$ STAT
$ QUIT
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/21 (ftp).
Tried credentials: b' ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/21 (ftp).
Tried credentials: b'anonymous':b'IEUser@'
Family fingerprint: gafgyt
Commands captured:
$ USER anonymous
$ PASS IEUser@
show less
Honeypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: [SOME-IP] ...
show moreHoneypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: [SOME-IP]:23, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36:Accept-Encoding: gzip, *1:$4, OPTIONS rtsp://example.com RTSP/1.0:Cseq: 5560
• Number of login attempts: 4
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running n ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-07-10T06:59:26Z.
show less
LF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 34.38.148.222 (BE/Belgium/222.148.38.34.bc.googl ...
show moreLF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 34.38.148.222 (BE/Belgium/222.148.38.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
[10/Jul/2026 07:48:25] SMTP Spam attack detected from 34.38.148.222, client closed connection before ...
show more[10/Jul/2026 07:48:25] SMTP Spam attack detected from 34.38.148.222, client closed connection before SMTP greeting
[10/Jul/2026 07:48:49] SMTP Spam attack detected from 34.38.148.222, client closed connection before SMTP greeting
[10/Jul/2026 07:48:54] SMTP Spam attack detected from 34.38.148.222, client closed connection before SMTP greeting
...
show less
Brute-Force
Email Spam
Anonymous
Honeypot hit: Unauthorized traffic on 21/ftpd
Reported by: https://github.com/sefinek/T-Pot-To-Abuse ...
show moreHoneypot hit: Unauthorized traffic on 21/ftpd
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Port Scan
Showing 1 to
15
of 25 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩