🇳🇱
195.178.110.137
9 hours ago
SSH honeypot (Cowrie) recorded 16 events over 112m. Activity: SSH connection to honeypot; SSH creden ...
show more
SSH honeypot (Cowrie) recorded 16 events over 112m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: AdminGPON, root, support. Passwords tried: ALC#FGU, admin, support. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇸🇮
130.12.182.225
10 hours ago
SSH honeypot (Cowrie) recorded 5 events over 19m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 5 events over 19m. Activity: SSH connection to honeypot; SSH credential brute-force; root credential accepted. Usernames tried: root. Passwords tried: qweasdzxc2002, root. Wazuh rules: 100100,100101,100106.
show less
Brute-Force
SSH
🇸🇮
102.220.160.110
10 hours ago
SSH honeypot (Cowrie) recorded 6 events over 30m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 6 events over 30m. Activity: SSH connection to honeypot; SSH credential brute-force; successful honeypot login. Usernames tried: root, user. Passwords tried: 2008-2009, rootpass70, user. Wazuh rules: 100100,100101,100102.
show less
Brute-Force
SSH
🇷🇴
2.57.121.112
10 hours ago
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credentia ...
show more
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: kyrsten, myesha. Passwords tried: kyrsten, kyrsten1, kyrsten123, kyrsten1234. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇷🇴
92.118.39.49
10 hours ago
SSH honeypot (Cowrie) recorded 36 events over 51m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 36 events over 51m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: root. Passwords tried: 1234abcd, 123abc, 123qwe, 1q2w3e. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇷🇴
92.118.39.50
10 hours ago
SSH honeypot (Cowrie) recorded 38 events over 1m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 38 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood. Usernames tried: elastic, elasticsearch, es, ftptest, ftpuser. Passwords tried: 123, 1234, 12345, 123456. Wazuh rules: 100100,100101,100113.
show less
Brute-Force
SSH
🇨🇳
221.202.188.169
10 hours ago
SSH honeypot (Cowrie) recorded 40 events over 1m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 40 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood; root credential accepted. Usernames tried: root. Passwords tried: admin, administrator, apache, centos. Wazuh rules: 100100,100101,100106,100113.
show less
Brute-Force
SSH
🇩🇪
85.14.245.122
10 hours ago
SSH honeypot (Cowrie) recorded 91 events over 54m. Activity: SSH connection to honeypot; connection ...
show more
SSH honeypot (Cowrie) recorded 91 events over 54m. Activity: SSH connection to honeypot; connection flood. Wazuh rules: 100100,100113.
show less
Brute-Force
SSH
🇺🇸
172.233.183.40
11 hours ago
CrowdSec detected
Brute-Force
SSH
🇺🇸
4.236.173.168
18 hours ago
CrowdSec detected
Brute-Force
SSH
🇺🇸
96.126.106.7
26 Aug 2026
CrowdSec detected
Brute-Force
SSH
🇸🇬
43.106.51.169
26 Aug 2026
CrowdSec detected
Brute-Force
SSH
🇸🇪
193.187.91.218
25 Aug 2026
CrowdSec detected
Brute-Force
SSH
🇨🇳
116.177.172.108
25 Aug 2026
SSH honeypot (Cowrie) recorded 14 events over 24m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 14 events over 24m. Activity: SSH connection to honeypot; SSH credential brute-force; post-auth command execution; successful honeypot login. Usernames tried: admin, deploy, deployer, root, testuser, user. Passwords tried: 1, admin@123, deploy123, deployer. Commands: uname -a Wazuh rules: 100100,100101,100102,100103.
show less
Hacking
Brute-Force
SSH
🇫🇷
169.58.186.199
25 Aug 2026
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credentia ...
show more
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; successful honeypot login. Usernames tried: admin, root, user. Passwords tried: 1234, admin, user. Wazuh rules: 100100,100101,100102.
show less
Brute-Force
SSH
🇳🇱
195.178.110.217
25 Aug 2026
SSH honeypot (Cowrie) recorded 23 events over 20m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 23 events over 20m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: root. Passwords tried: 123, 1234, 12345, 123456. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇰🇷
121.183.240.55
24 Aug 2026
SSH honeypot (Cowrie) recorded 14 events over 1m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 14 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; Telegram Desktop session-data theft recon; post-auth command execution; root credential accepted. Usernames tried: root. Passwords tried: 12345, admin, guest, root. Commands: /ip cloud print | ifconfig | uname -a Wazuh rules: 100100,100101,100103,100106,100109.
show less
Hacking
Brute-Force
Exploited Host
SSH
🇹🇷
94.154.43.183
24 Aug 2026
SSH honeypot (Cowrie) recorded 29 events over 1m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 29 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood. Usernames tried: CUAdmin, admin, rapport, root, yhtcAdmin. Passwords tried: 1q2w3e, 7ujMko0vizxv, CUAdmin, Cm1@YHfw. Wazuh rules: 100100,100101,100113.
show less
Brute-Force
SSH
🇺🇸
137.184.137.233
24 Aug 2026
SSH honeypot (Cowrie) recorded 32 events over 34m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 32 events over 34m. Activity: SSH connection to honeypot; SSH credential brute-force; post-auth command execution; successful honeypot login. Usernames tried: root, trade, trader, trading, xauusd. Passwords tried: Trade123, Trading, XAU/USD, XAUUSD. Commands: /bin/./uname -s -v -n -r -m Wazuh rules: 100100,100101,100102,100103.
show less
Hacking
Brute-Force
SSH
🇳🇱
91.92.40.24
24 Aug 2026
SSH honeypot (Cowrie) recorded 418 events over 21m. Activity: SSH connection to honeypot; SSH creden ...
show more
SSH honeypot (Cowrie) recorded 418 events over 21m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood. Usernames tried: a, a1, aa, aaa, admin, admin1. Passwords tried: !@#$%^, 0, 0000, 00000000. Wazuh rules: 100100,100101,100113.
show less
Brute-Force
SSH
🇳🇱
195.178.110.137
24 Aug 2026
SSH honeypot (Cowrie) recorded 6 events over 28m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 6 events over 28m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: support. Passwords tried: support. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇵🇱
176.53.159.196
24 Aug 2026
SSH honeypot (Cowrie) recorded 6 events over 107m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 6 events over 107m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: admin. Passwords tried: admin. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇺🇸
47.253.5.130
24 Aug 2026
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credentia ...
show more
SSH honeypot (Cowrie) recorded 8 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: admin, root, user. Passwords tried: 1234, admin, user. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇳🇱
45.148.10.183
24 Aug 2026
SSH honeypot (Cowrie) recorded 11 events over 16m. Activity: SSH connection to honeypot; SSH credent ...
show more
SSH honeypot (Cowrie) recorded 11 events over 16m. Activity: SSH connection to honeypot; SSH credential brute-force. Usernames tried: sol, solana. Passwords tried: 123, 1234, Solana, sol. Wazuh rules: 100100,100101.
show less
Brute-Force
SSH
🇩🇪
104.248.251.209
24 Aug 2026
SSH honeypot (Cowrie) recorded 20 events over 1m. Activity: SSH connection to honeypot; SSH credenti ...
show more
SSH honeypot (Cowrie) recorded 20 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood. Usernames tried: Call-ID: 50000, Contact: <sip:nm@nm>, From: <sip:nm@nm>;tag=root, Max-Forwards: 70. Passwords tried: Accept: application/sdp, CSeq: 42 OPTIONS, Content-Length: 0, To: <sip:nm2@nm2>. Wazuh rules: 100100,100101,100113.
show less
Brute-Force
SSH