Honeypot Live Stats — 28 connections today from 18 unique IPs (28 total, 18 unique IPs all-time)
Kris Pham

Xin chào, mình là Kris Pham 👋

Server cá nhân trên AWS — nơi mình vừa học DevOps từ số 0, vừa dựng honeypot để bẫy và theo dõi hacker thật.

Xem nhật ký triển khai → Lỗi & cách xử lý
/01

Nhật ký triển khai

Toàn bộ quá trình dựng server, từ EC2 trống đến website hoàn chỉnh.

/02

Lỗi & cách xử lý

Hơn 30 lỗi thực tế đã gặp và cách mình xử lý từng cái.

/03

Honeypot Live

Theo dõi trực tiếp số lượt hacker đang cố tấn công server.

28
Tổng kết nối honeypot
18
IP duy nhất (toàn thời gian)
28
Kết nối hôm nay

Honeypot report: 2026-10-23

Reading time: ~1 minute

50 connections hit the honeypot on 2026-10-23, from 27 unique IP(s).

Top source IPs

151.243.11.160 — 12 connections
165.22.143.96 — 3 connections
159.65.99.44 — 3 connections
88.175.238.196 — 2 connections
191.84.216.100 — 2 connections

Commands attempted

/bin/./uname -s -v -n -r -m
/bin/./uname -s -v -n -r -m
/bin/./uname -s -v -n -r -m

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot

Honeypot report: 2026-10-24

Reading time: ~1 minute

43 connections hit the honeypot on 2026-10-24, from 31 unique IP(s).

Top source IPs

117.50.179.192 — 3 connections
128.75.252.215 — 2 connections
76.110.127.50 — 2 connections
190.172.87.15 — 2 connections
31.133.62.2 — 2 connections

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot

Honeypot report: 2026-10-25

Reading time: 7 minutes

130 connections hit the honeypot on 2026-10-25, from 38 unique IP(s).

Top source IPs

159.89.37.253 — 74 connections
195.178.110.217 — 3 connections
172.236.228.38 — 2 connections
114.12.0.138 — 2 connections
109.137.16.97 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_control'"'"' '"'"'check_522d1580a3be625754396888dc612804'"'"''
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_control' 'check_522d1580a3be625754396888dc612804'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_math'"'"' "$((101*550+86))"'
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_math' "$((101*550+86))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_pid' "$$"
sh -c 'set -- '"'"'check_522d1580a3be625754396888dc612804_arg1'"'"' '"'"'check_522d1580a3be625754396888dc612804_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_positional'"'"' "$#|$1|$2"'
set -- 'check_522d1580a3be625754396888dc612804_arg1' 'check_522d1580a3be625754396888dc612804_arg2'; printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_positional' "$#|$1|$2"
sh -c 'f_check_522d1580a3be625754396888dc612804() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_function'"'"' "$1|$#"; }; f_check_522d1580a3be625754396888dc612804 '"'"'check_522d1580a3be625754396888dc612804_function_value'"'"''
f_check_522d1580a3be625754396888dc612804() { printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_function' "$1|$#"; }; f_check_522d1580a3be625754396888dc612804 'check_522d1580a3be625754396888dc612804_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_done'"'"''
printf '\n%s\n' 'check_522d1580a3be625754396888dc612804_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_control'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142'"'"''
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_control' 'check_49981ff2acc6ca70d51a9a7f9e094142'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_math'"'"' "$((895*251+23))"'
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_math' "$((895*251+23))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_pid' "$$"
sh -c 'set -- '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_arg1'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_positional'"'"' "$#|$1|$2"'
set -- 'check_49981ff2acc6ca70d51a9a7f9e094142_arg1' 'check_49981ff2acc6ca70d51a9a7f9e094142_arg2'; printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_positional' "$#|$1|$2"
sh -c 'f_check_49981ff2acc6ca70d51a9a7f9e094142() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_function'"'"' "$1|$#"; }; f_check_49981ff2acc6ca70d51a9a7f9e094142 '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_function_value'"'"''
f_check_49981ff2acc6ca70d51a9a7f9e094142() { printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_function' "$1|$#"; }; f_check_49981ff2acc6ca70d51a9a7f9e094142 'check_49981ff2acc6ca70d51a9a7f9e094142_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_done'"'"''
printf '\n%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_done'
echo; echo 'check_cc3f8ae624f27b4832ef9c56d5af9827_transport_done'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_control|check_3bda2283a681b89ad6bf6be877d9d29d'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_math|'"$((368*908+94))"
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_pid|'"$$"
set -- 'check_3bda2283a681b89ad6bf6be877d9d29d_arg1' 'check_3bda2283a681b89ad6bf6be877d9d29d_arg2'; echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_positional|'"$#|$1|$2"
f_check_3bda2283a681b89ad6bf6be877d9d29d() { echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_function|'"$1|$#"; }; f_check_3bda2283a681b89ad6bf6be877d9d29d 'check_3bda2283a681b89ad6bf6be877d9d29d_function_value'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_done'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_control|check_a0ee07b8f8c01903439379a2edd4cb2f'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_math|'"$((322*986+71))"
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_pid|'"$$"
set -- 'check_a0ee07b8f8c01903439379a2edd4cb2f_arg1' 'check_a0ee07b8f8c01903439379a2edd4cb2f_arg2'; echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_positional|'"$#|$1|$2"
f_check_a0ee07b8f8c01903439379a2edd4cb2f() { echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_function|'"$1|$#"; }; f_check_a0ee07b8f8c01903439379a2edd4cb2f 'check_a0ee07b8f8c01903439379a2edd4cb2f_function_value'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_done'
echo; echo 'check_b2914c72fd4c421e6882ff8af96329a1_transport_done'
echo '111111' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '111111' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot

Honeypot report: 2026-10-26

Reading time: 9 minutes

48 connections hit the honeypot on 2026-10-26, from 36 unique IP(s).

Top source IPs

80.94.92.179 — 3 connections
179.189.41.56 — 2 connections
34.79.143.116 — 2 connections
34.76.74.18 — 2 connections
198.163.193.129 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_control'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5'"'"''
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_control' 'check_d69de012998d8753cd1fff6de0b29ba5'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_math'"'"' "$((107*876+40))"'
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_math' "$((107*876+40))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_pid' "$$"
sh -c 'set -- '"'"'check_d69de012998d8753cd1fff6de0b29ba5_arg1'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_positional'"'"' "$#|$1|$2"'
set -- 'check_d69de012998d8753cd1fff6de0b29ba5_arg1' 'check_d69de012998d8753cd1fff6de0b29ba5_arg2'; printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_positional' "$#|$1|$2"
sh -c 'f_check_d69de012998d8753cd1fff6de0b29ba5() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_function'"'"' "$1|$#"; }; f_check_d69de012998d8753cd1fff6de0b29ba5 '"'"'check_d69de012998d8753cd1fff6de0b29ba5_function_value'"'"''
f_check_d69de012998d8753cd1fff6de0b29ba5() { printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_function' "$1|$#"; }; f_check_d69de012998d8753cd1fff6de0b29ba5 'check_d69de012998d8753cd1fff6de0b29ba5_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_done'"'"''
printf '\n%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_control'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b'"'"''
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_control' 'check_d94d6a485043a983f2ca930684100e9b'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_math'"'"' "$((795*452+49))"'
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_math' "$((795*452+49))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_pid' "$$"
sh -c 'set -- '"'"'check_d94d6a485043a983f2ca930684100e9b_arg1'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_positional'"'"' "$#|$1|$2"'
set -- 'check_d94d6a485043a983f2ca930684100e9b_arg1' 'check_d94d6a485043a983f2ca930684100e9b_arg2'; printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_positional' "$#|$1|$2"
sh -c 'f_check_d94d6a485043a983f2ca930684100e9b() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_function'"'"' "$1|$#"; }; f_check_d94d6a485043a983f2ca930684100e9b '"'"'check_d94d6a485043a983f2ca930684100e9b_function_value'"'"''
f_check_d94d6a485043a983f2ca930684100e9b() { printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_function' "$1|$#"; }; f_check_d94d6a485043a983f2ca930684100e9b 'check_d94d6a485043a983f2ca930684100e9b_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_done'"'"''
printf '\n%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_done'
echo; echo 'check_269aed571e4fe5091a18286300b5694d_transport_done'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_control|check_1d167245e2999b2626d91975438ee2cf'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_math|'"$((468*515+75))"
echo 'check_1d167245e2999b2626d91975438ee2cf_small_pid|'"$$"
set -- 'check_1d167245e2999b2626d91975438ee2cf_arg1' 'check_1d167245e2999b2626d91975438ee2cf_arg2'; echo 'check_1d167245e2999b2626d91975438ee2cf_small_positional|'"$#|$1|$2"
f_check_1d167245e2999b2626d91975438ee2cf() { echo 'check_1d167245e2999b2626d91975438ee2cf_small_function|'"$1|$#"; }; f_check_1d167245e2999b2626d91975438ee2cf 'check_1d167245e2999b2626d91975438ee2cf_function_value'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_done'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_control|check_90e2d58ca6185c128411398e0f69f02a'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_math|'"$((202*164+37))"
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_pid|'"$$"
set -- 'check_90e2d58ca6185c128411398e0f69f02a_arg1' 'check_90e2d58ca6185c128411398e0f69f02a_arg2'; echo 'check_90e2d58ca6185c128411398e0f69f02a_small_positional|'"$#|$1|$2"
f_check_90e2d58ca6185c128411398e0f69f02a() { echo 'check_90e2d58ca6185c128411398e0f69f02a_small_function|'"$1|$#"; }; f_check_90e2d58ca6185c128411398e0f69f02a 'check_90e2d58ca6185c128411398e0f69f02a_function_value'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_done'
echo; echo 'check_b84dba1612ae8218c52a86b05033bf0d_transport_done'
echo '000000' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '000000' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_control'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d'"'"''
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_control' 'check_6155908bf6d06bceba266e6ef3c51c2d'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_math'"'"' "$((990*337+86))"'
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_math' "$((990*337+86))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_pid' "$$"
sh -c 'set -- '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_arg1'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_positional'"'"' "$#|$1|$2"'
set -- 'check_6155908bf6d06bceba266e6ef3c51c2d_arg1' 'check_6155908bf6d06bceba266e6ef3c51c2d_arg2'; printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_positional' "$#|$1|$2"
sh -c 'f_check_6155908bf6d06bceba266e6ef3c51c2d() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_function'"'"' "$1|$#"; }; f_check_6155908bf6d06bceba266e6ef3c51c2d '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_function_value'"'"''
f_check_6155908bf6d06bceba266e6ef3c51c2d() { printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_function' "$1|$#"; }; f_check_6155908bf6d06bceba266e6ef3c51c2d 'check_6155908bf6d06bceba266e6ef3c51c2d_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot

Honeypot report: 2026-10-27

Reading time: 10 minutes

61 connections hit the honeypot on 2026-10-27, from 35 unique IP(s).

Top source IPs

36.94.134.83 — 11 connections
80.94.92.179 — 4 connections
177.253.130.98 — 2 connections
195.26.18.161 — 2 connections
161.248.187.8 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_control'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9'"'"''
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_control' 'check_7762733a2f042b29ac35b78752ddf1b9'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_math'"'"' "$((653*760+8))"'
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_math' "$((653*760+8))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_pid' "$$"
sh -c 'set -- '"'"'check_7762733a2f042b29ac35b78752ddf1b9_arg1'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_positional'"'"' "$#|$1|$2"'
set -- 'check_7762733a2f042b29ac35b78752ddf1b9_arg1' 'check_7762733a2f042b29ac35b78752ddf1b9_arg2'; printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_positional' "$#|$1|$2"
sh -c 'f_check_7762733a2f042b29ac35b78752ddf1b9() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_function'"'"' "$1|$#"; }; f_check_7762733a2f042b29ac35b78752ddf1b9 '"'"'check_7762733a2f042b29ac35b78752ddf1b9_function_value'"'"''
f_check_7762733a2f042b29ac35b78752ddf1b9() { printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_function' "$1|$#"; }; f_check_7762733a2f042b29ac35b78752ddf1b9 'check_7762733a2f042b29ac35b78752ddf1b9_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_done'"'"''
printf '\n%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_control'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c'"'"''
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_control' 'check_50e9a9495c9fed3a0f1393d26efdce1c'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_math'"'"' "$((774*725+53))"'
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_math' "$((774*725+53))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_pid' "$$"
sh -c 'set -- '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_arg1'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_positional'"'"' "$#|$1|$2"'
set -- 'check_50e9a9495c9fed3a0f1393d26efdce1c_arg1' 'check_50e9a9495c9fed3a0f1393d26efdce1c_arg2'; printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_positional' "$#|$1|$2"
sh -c 'f_check_50e9a9495c9fed3a0f1393d26efdce1c() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_function'"'"' "$1|$#"; }; f_check_50e9a9495c9fed3a0f1393d26efdce1c '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_function_value'"'"''
f_check_50e9a9495c9fed3a0f1393d26efdce1c() { printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_function' "$1|$#"; }; f_check_50e9a9495c9fed3a0f1393d26efdce1c 'check_50e9a9495c9fed3a0f1393d26efdce1c_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_done'"'"''
printf '\n%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_done'
echo; echo 'check_789720555c866cf807a50f64665e820d_transport_done'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_control|check_990e23746e6ee33ecb067728b52cca9a'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_math|'"$((300*158+92))"
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_pid|'"$$"
set -- 'check_990e23746e6ee33ecb067728b52cca9a_arg1' 'check_990e23746e6ee33ecb067728b52cca9a_arg2'; echo 'check_990e23746e6ee33ecb067728b52cca9a_small_positional|'"$#|$1|$2"
f_check_990e23746e6ee33ecb067728b52cca9a() { echo 'check_990e23746e6ee33ecb067728b52cca9a_small_function|'"$1|$#"; }; f_check_990e23746e6ee33ecb067728b52cca9a 'check_990e23746e6ee33ecb067728b52cca9a_function_value'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_done'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_control|check_59ff4fc1a24bc2331263d517784aeeba'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_math|'"$((109*598+51))"
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_pid|'"$$"
set -- 'check_59ff4fc1a24bc2331263d517784aeeba_arg1' 'check_59ff4fc1a24bc2331263d517784aeeba_arg2'; echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_positional|'"$#|$1|$2"
f_check_59ff4fc1a24bc2331263d517784aeeba() { echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_function|'"$1|$#"; }; f_check_59ff4fc1a24bc2331263d517784aeeba 'check_59ff4fc1a24bc2331263d517784aeeba_function_value'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_done'
echo; echo 'check_1c641a0f5d5ae943733e6484a4fd1dc5_transport_done'
echo '000000' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '000000' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_control'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e'"'"''
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_control' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_math'"'"' "$((823*284+16))"'
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_math' "$((823*284+16))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_pid' "$$"
sh -c 'set -- '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg1'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_positional'"'"' "$#|$1|$2"'
set -- 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg1' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg2'; printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_positional' "$#|$1|$2"
sh -c 'f_check_60ae46c9819c822ab7d4c3f5b50e8d5e() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_function'"'"' "$1|$#"; }; f_check_60ae46c9819c822ab7d4c3f5b50e8d5e '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_function_value'"'"''
f_check_60ae46c9819c822ab7d4c3f5b50e8d5e() { printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_function' "$1|$#"; }; f_check_60ae46c9819c822ab7d4c3f5b50e8d5e 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot

Honeypot report: 2026-10-28

Reading time: ~1 minute

53 connections hit the honeypot on 2026-10-28, from 31 unique IP(s).

Top source IPs

172.236.35.120 — 14 connections
167.172.193.248 — 2 connections
207.248.0.37 — 2 connections
27.0.135.12 — 2 connections
190.191.45.102 — 2 connections

Commands attempted

/bin/./uname -s -v -n -r -m

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

General honeypot