Honeypot Live Stats — 31 connections today from 20 unique IPs (31 total, 20 unique IPs all-time)
Kris Pham
· Reading time: 9 minutes · Admin

Honeypot report: 2026-10-26

48 connections hit the honeypot on 2026-10-26, from 36 unique IP(s).

Top source IPs

80.94.92.179 — 3 connections
179.189.41.56 — 2 connections
34.79.143.116 — 2 connections
34.76.74.18 — 2 connections
198.163.193.129 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_control'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5'"'"''
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_control' 'check_d69de012998d8753cd1fff6de0b29ba5'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_math'"'"' "$((107*876+40))"'
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_math' "$((107*876+40))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_pid' "$$"
sh -c 'set -- '"'"'check_d69de012998d8753cd1fff6de0b29ba5_arg1'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_positional'"'"' "$#|$1|$2"'
set -- 'check_d69de012998d8753cd1fff6de0b29ba5_arg1' 'check_d69de012998d8753cd1fff6de0b29ba5_arg2'; printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_positional' "$#|$1|$2"
sh -c 'f_check_d69de012998d8753cd1fff6de0b29ba5() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_function'"'"' "$1|$#"; }; f_check_d69de012998d8753cd1fff6de0b29ba5 '"'"'check_d69de012998d8753cd1fff6de0b29ba5_function_value'"'"''
f_check_d69de012998d8753cd1fff6de0b29ba5() { printf '\n%s|%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_function' "$1|$#"; }; f_check_d69de012998d8753cd1fff6de0b29ba5 'check_d69de012998d8753cd1fff6de0b29ba5_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_d69de012998d8753cd1fff6de0b29ba5_small_done'"'"''
printf '\n%s\n' 'check_d69de012998d8753cd1fff6de0b29ba5_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_control'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b'"'"''
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_control' 'check_d94d6a485043a983f2ca930684100e9b'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_math'"'"' "$((795*452+49))"'
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_math' "$((795*452+49))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_pid' "$$"
sh -c 'set -- '"'"'check_d94d6a485043a983f2ca930684100e9b_arg1'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_positional'"'"' "$#|$1|$2"'
set -- 'check_d94d6a485043a983f2ca930684100e9b_arg1' 'check_d94d6a485043a983f2ca930684100e9b_arg2'; printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_positional' "$#|$1|$2"
sh -c 'f_check_d94d6a485043a983f2ca930684100e9b() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_function'"'"' "$1|$#"; }; f_check_d94d6a485043a983f2ca930684100e9b '"'"'check_d94d6a485043a983f2ca930684100e9b_function_value'"'"''
f_check_d94d6a485043a983f2ca930684100e9b() { printf '\n%s|%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_function' "$1|$#"; }; f_check_d94d6a485043a983f2ca930684100e9b 'check_d94d6a485043a983f2ca930684100e9b_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_d94d6a485043a983f2ca930684100e9b_small_done'"'"''
printf '\n%s\n' 'check_d94d6a485043a983f2ca930684100e9b_small_done'
echo; echo 'check_269aed571e4fe5091a18286300b5694d_transport_done'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_control|check_1d167245e2999b2626d91975438ee2cf'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_math|'"$((468*515+75))"
echo 'check_1d167245e2999b2626d91975438ee2cf_small_pid|'"$$"
set -- 'check_1d167245e2999b2626d91975438ee2cf_arg1' 'check_1d167245e2999b2626d91975438ee2cf_arg2'; echo 'check_1d167245e2999b2626d91975438ee2cf_small_positional|'"$#|$1|$2"
f_check_1d167245e2999b2626d91975438ee2cf() { echo 'check_1d167245e2999b2626d91975438ee2cf_small_function|'"$1|$#"; }; f_check_1d167245e2999b2626d91975438ee2cf 'check_1d167245e2999b2626d91975438ee2cf_function_value'
echo 'check_1d167245e2999b2626d91975438ee2cf_small_done'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_control|check_90e2d58ca6185c128411398e0f69f02a'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_math|'"$((202*164+37))"
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_pid|'"$$"
set -- 'check_90e2d58ca6185c128411398e0f69f02a_arg1' 'check_90e2d58ca6185c128411398e0f69f02a_arg2'; echo 'check_90e2d58ca6185c128411398e0f69f02a_small_positional|'"$#|$1|$2"
f_check_90e2d58ca6185c128411398e0f69f02a() { echo 'check_90e2d58ca6185c128411398e0f69f02a_small_function|'"$1|$#"; }; f_check_90e2d58ca6185c128411398e0f69f02a 'check_90e2d58ca6185c128411398e0f69f02a_function_value'
echo 'check_90e2d58ca6185c128411398e0f69f02a_small_done'
echo; echo 'check_b84dba1612ae8218c52a86b05033bf0d_transport_done'
echo '000000' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '000000' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_control'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d'"'"''
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_control' 'check_6155908bf6d06bceba266e6ef3c51c2d'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_math'"'"' "$((990*337+86))"'
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_math' "$((990*337+86))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_pid' "$$"
sh -c 'set -- '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_arg1'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_positional'"'"' "$#|$1|$2"'
set -- 'check_6155908bf6d06bceba266e6ef3c51c2d_arg1' 'check_6155908bf6d06bceba266e6ef3c51c2d_arg2'; printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_positional' "$#|$1|$2"
sh -c 'f_check_6155908bf6d06bceba266e6ef3c51c2d() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_small_function'"'"' "$1|$#"; }; f_check_6155908bf6d06bceba266e6ef3c51c2d '"'"'check_6155908bf6d06bceba266e6ef3c51c2d_function_value'"'"''
f_check_6155908bf6d06bceba266e6ef3c51c2d() { printf '\n%s|%s\n' 'check_6155908bf6d06bceba266e6ef3c51c2d_small_function' "$1|$#"; }; f_check_6155908bf6d06bceba266e6ef3c51c2d 'check_6155908bf6d06bceba266e6ef3c51c2d_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

← Back to home