🇰🇷
14.55.31.113
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; una ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; uname -a
show less
Port Scan
Brute-Force
SSH
🇩🇪
64.226.126.224
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; una ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; uname -a
show less
Port Scan
Brute-Force
SSH
🇧🇪
34.53.210.242
19 Jun 2026
Honeypot hit: | SSH brute-force (3 successful logins) | commands run: User-Agent: Mozilla/5.0 (Windo ...
show more
Honeypot hit: | SSH brute-force (3 successful logins) | commands run: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36; Accept-Encoding: gzip;
show less
Port Scan
Brute-Force
SSH
🇸🇬
43.156.71.219
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH
🇨🇳
220.197.14.60
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH
🇧🇪
34.76.180.253
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH
🇺🇸
64.62.156.52
19 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: User-Agent: Mozilla/5.0 (Windo ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36; Accept: */*; Accept-Encoding: gzip
show less
Port Scan
Brute-Force
SSH
🇳🇱
91.92.40.204
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: export PATH=/usr/local/sbin:/u ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$up
show less
Port Scan
Brute-Force
SSH
🇨🇳
36.133.208.182
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: uname -s -m
Port Scan
Brute-Force
SSH
🇨🇳
218.201.39.71
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | malware uploaded via SFTP (1 file(s)) SHA256 ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | malware uploaded via SFTP (1 file(s)) SHA256: 629db57b96d6e965401d866f895d86c542efe344b3d489630a6ec09d643add76
show less
Port Scan
Brute-Force
SSH
🇺🇸
104.164.254.175
18 Jun 2026
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-e ...
show more
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-encoded path traversal targeting /etc/passwd and /bin/sh via /icons/ and /cgi-bin/. Canary string injection to confirm code execution. UA: Chrome/107 on Linux.
show less
Web App Attack
🇺🇸
104.168.118.198
18 Jun 2026
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-e ...
show more
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-encoded path traversal targeting /etc/passwd and /bin/sh via /icons/ and /cgi-bin/. Canary string injection to confirm code execution. UA: Chrome/107 on Linux.
show less
Web App Attack
🇺🇸
107.173.137.73
18 Jun 2026
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-e ...
show more
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-encoded path traversal targeting /etc/passwd and /bin/sh via /icons/ and /cgi-bin/. Canary string injection to confirm code execution. UA: Chrome/107 on Linux.
show less
Web App Attack
🇺🇸
107.174.4.121
18 Jun 2026
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-e ...
show more
Web exploit attempt against honeypot (CVE-2021-41773 Apache 2.4.49 path traversal/RCE). Double URL-encoded path traversal targeting /etc/passwd and /bin/sh via /icons/ and /cgi-bin/. Canary string injection to confirm code execution. UA: Chrome/107 on Linux.
show less
Web App Attack
🇳🇱
91.92.40.15
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: echo SHELL_TEST; echo ALIVE_CH ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: echo SHELL_TEST; echo ALIVE_CHECK; /bin/busybox TEST 2>&1
show less
Port Scan
Brute-Force
SSH
🇳🇱
91.92.40.12
18 Jun 2026
Honeypot hit: | SSH brute-force (42 successful logins) | commands run: export PATH=/usr/local/sbin:/ ...
show more
Honeypot hit: | SSH brute-force (42 successful logins) | commands run: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$u
show less
Port Scan
Brute-Force
SSH
🇩🇪
167.99.247.86
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; una ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: /ip cloud print; ifconfig; uname -a
show less
Port Scan
Brute-Force
SSH
🇳🇱
45.198.224.143
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH
🇳🇱
176.65.139.140
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: echo SHELL_TEST; /bin/busybox ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: echo SHELL_TEST; /bin/busybox TEST; cat /proc
show less
Port Scan
Brute-Force
SSH
🇨🇳
39.152.240.15
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: uname -s -m
Port Scan
Brute-Force
SSH
🇷🇴
80.94.92.171
18 Jun 2026
Honeypot hit: | SSH brute-force (4 successful logins) | commands run: /bin/./uname -s -v -n -r -m; / ...
show more
Honeypot hit: | SSH brute-force (4 successful logins) | commands run: /bin/./uname -s -v -n -r -m; /bin/./uname -s -v -n -r -m; /bin/./uname -s -v -n -r -m
show less
Port Scan
Brute-Force
SSH
🇨🇳
39.107.154.254
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH
🇯🇵
8.216.4.69
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: User-Agent: curl/7.64.1; Accep ...
show more
Honeypot hit: | SSH brute-force (1 successful logins) | commands run: User-Agent: curl/7.64.1; Accept: */*;
show less
Port Scan
Brute-Force
SSH
🇳🇱
167.71.6.191
18 Jun 2026
Honeypot hit: | SSH brute-force (18 successful logins) | commands run: echo SHELL_TEST; echo SHELL_T ...
show more
Honeypot hit: | SSH brute-force (18 successful logins) | commands run: echo SHELL_TEST; echo SHELL_TEST; echo SHELL_TEST
show less
Port Scan
Brute-Force
SSH
🇨🇳
180.184.176.94
18 Jun 2026
Honeypot hit: | SSH brute-force (1 successful logins)
Port Scan
Brute-Force
SSH