Honeypot report: 2026-10-25

130 connections hit the honeypot on 2026-10-25, from 38 unique IP(s).

Top source IPs

159.89.37.253 — 74 connections
195.178.110.217 — 3 connections
172.236.228.38 — 2 connections
114.12.0.138 — 2 connections
109.137.16.97 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_control'"'"' '"'"'check_522d1580a3be625754396888dc612804'"'"''
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_control' 'check_522d1580a3be625754396888dc612804'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_math'"'"' "$((101*550+86))"'
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_math' "$((101*550+86))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_pid' "$$"
sh -c 'set -- '"'"'check_522d1580a3be625754396888dc612804_arg1'"'"' '"'"'check_522d1580a3be625754396888dc612804_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_positional'"'"' "$#|$1|$2"'
set -- 'check_522d1580a3be625754396888dc612804_arg1' 'check_522d1580a3be625754396888dc612804_arg2'; printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_positional' "$#|$1|$2"
sh -c 'f_check_522d1580a3be625754396888dc612804() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_function'"'"' "$1|$#"; }; f_check_522d1580a3be625754396888dc612804 '"'"'check_522d1580a3be625754396888dc612804_function_value'"'"''
f_check_522d1580a3be625754396888dc612804() { printf '\n%s|%s\n' 'check_522d1580a3be625754396888dc612804_small_function' "$1|$#"; }; f_check_522d1580a3be625754396888dc612804 'check_522d1580a3be625754396888dc612804_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_522d1580a3be625754396888dc612804_small_done'"'"''
printf '\n%s\n' 'check_522d1580a3be625754396888dc612804_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_control'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142'"'"''
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_control' 'check_49981ff2acc6ca70d51a9a7f9e094142'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_math'"'"' "$((895*251+23))"'
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_math' "$((895*251+23))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_pid' "$$"
sh -c 'set -- '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_arg1'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_positional'"'"' "$#|$1|$2"'
set -- 'check_49981ff2acc6ca70d51a9a7f9e094142_arg1' 'check_49981ff2acc6ca70d51a9a7f9e094142_arg2'; printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_positional' "$#|$1|$2"
sh -c 'f_check_49981ff2acc6ca70d51a9a7f9e094142() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_function'"'"' "$1|$#"; }; f_check_49981ff2acc6ca70d51a9a7f9e094142 '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_function_value'"'"''
f_check_49981ff2acc6ca70d51a9a7f9e094142() { printf '\n%s|%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_function' "$1|$#"; }; f_check_49981ff2acc6ca70d51a9a7f9e094142 'check_49981ff2acc6ca70d51a9a7f9e094142_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_49981ff2acc6ca70d51a9a7f9e094142_small_done'"'"''
printf '\n%s\n' 'check_49981ff2acc6ca70d51a9a7f9e094142_small_done'
echo; echo 'check_cc3f8ae624f27b4832ef9c56d5af9827_transport_done'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_control|check_3bda2283a681b89ad6bf6be877d9d29d'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_math|'"$((368*908+94))"
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_pid|'"$$"
set -- 'check_3bda2283a681b89ad6bf6be877d9d29d_arg1' 'check_3bda2283a681b89ad6bf6be877d9d29d_arg2'; echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_positional|'"$#|$1|$2"
f_check_3bda2283a681b89ad6bf6be877d9d29d() { echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_function|'"$1|$#"; }; f_check_3bda2283a681b89ad6bf6be877d9d29d 'check_3bda2283a681b89ad6bf6be877d9d29d_function_value'
echo 'check_3bda2283a681b89ad6bf6be877d9d29d_small_done'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_control|check_a0ee07b8f8c01903439379a2edd4cb2f'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_math|'"$((322*986+71))"
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_pid|'"$$"
set -- 'check_a0ee07b8f8c01903439379a2edd4cb2f_arg1' 'check_a0ee07b8f8c01903439379a2edd4cb2f_arg2'; echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_positional|'"$#|$1|$2"
f_check_a0ee07b8f8c01903439379a2edd4cb2f() { echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_function|'"$1|$#"; }; f_check_a0ee07b8f8c01903439379a2edd4cb2f 'check_a0ee07b8f8c01903439379a2edd4cb2f_function_value'
echo 'check_a0ee07b8f8c01903439379a2edd4cb2f_small_done'
echo; echo 'check_b2914c72fd4c421e6882ff8af96329a1_transport_done'
echo '111111' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '111111' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"
echo -e "\x6F\x6B"

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.