Honeypot Live Stats — 31 connections today from 20 unique IPs (31 total, 20 unique IPs all-time)
Kris Pham
· Reading time: 10 minutes · Admin

Honeypot report: 2026-10-27

61 connections hit the honeypot on 2026-10-27, from 35 unique IP(s).

Top source IPs

36.94.134.83 — 11 connections
80.94.92.179 — 4 connections
177.253.130.98 — 2 connections
195.26.18.161 — 2 connections
161.248.187.8 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_control'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9'"'"''
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_control' 'check_7762733a2f042b29ac35b78752ddf1b9'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_math'"'"' "$((653*760+8))"'
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_math' "$((653*760+8))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_pid' "$$"
sh -c 'set -- '"'"'check_7762733a2f042b29ac35b78752ddf1b9_arg1'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_positional'"'"' "$#|$1|$2"'
set -- 'check_7762733a2f042b29ac35b78752ddf1b9_arg1' 'check_7762733a2f042b29ac35b78752ddf1b9_arg2'; printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_positional' "$#|$1|$2"
sh -c 'f_check_7762733a2f042b29ac35b78752ddf1b9() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_function'"'"' "$1|$#"; }; f_check_7762733a2f042b29ac35b78752ddf1b9 '"'"'check_7762733a2f042b29ac35b78752ddf1b9_function_value'"'"''
f_check_7762733a2f042b29ac35b78752ddf1b9() { printf '\n%s|%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_function' "$1|$#"; }; f_check_7762733a2f042b29ac35b78752ddf1b9 'check_7762733a2f042b29ac35b78752ddf1b9_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_7762733a2f042b29ac35b78752ddf1b9_small_done'"'"''
printf '\n%s\n' 'check_7762733a2f042b29ac35b78752ddf1b9_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_control'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c'"'"''
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_control' 'check_50e9a9495c9fed3a0f1393d26efdce1c'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_math'"'"' "$((774*725+53))"'
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_math' "$((774*725+53))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_pid' "$$"
sh -c 'set -- '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_arg1'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_positional'"'"' "$#|$1|$2"'
set -- 'check_50e9a9495c9fed3a0f1393d26efdce1c_arg1' 'check_50e9a9495c9fed3a0f1393d26efdce1c_arg2'; printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_positional' "$#|$1|$2"
sh -c 'f_check_50e9a9495c9fed3a0f1393d26efdce1c() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_function'"'"' "$1|$#"; }; f_check_50e9a9495c9fed3a0f1393d26efdce1c '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_function_value'"'"''
f_check_50e9a9495c9fed3a0f1393d26efdce1c() { printf '\n%s|%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_function' "$1|$#"; }; f_check_50e9a9495c9fed3a0f1393d26efdce1c 'check_50e9a9495c9fed3a0f1393d26efdce1c_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_50e9a9495c9fed3a0f1393d26efdce1c_small_done'"'"''
printf '\n%s\n' 'check_50e9a9495c9fed3a0f1393d26efdce1c_small_done'
echo; echo 'check_789720555c866cf807a50f64665e820d_transport_done'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_control|check_990e23746e6ee33ecb067728b52cca9a'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_math|'"$((300*158+92))"
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_pid|'"$$"
set -- 'check_990e23746e6ee33ecb067728b52cca9a_arg1' 'check_990e23746e6ee33ecb067728b52cca9a_arg2'; echo 'check_990e23746e6ee33ecb067728b52cca9a_small_positional|'"$#|$1|$2"
f_check_990e23746e6ee33ecb067728b52cca9a() { echo 'check_990e23746e6ee33ecb067728b52cca9a_small_function|'"$1|$#"; }; f_check_990e23746e6ee33ecb067728b52cca9a 'check_990e23746e6ee33ecb067728b52cca9a_function_value'
echo 'check_990e23746e6ee33ecb067728b52cca9a_small_done'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_control|check_59ff4fc1a24bc2331263d517784aeeba'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_math|'"$((109*598+51))"
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_pid|'"$$"
set -- 'check_59ff4fc1a24bc2331263d517784aeeba_arg1' 'check_59ff4fc1a24bc2331263d517784aeeba_arg2'; echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_positional|'"$#|$1|$2"
f_check_59ff4fc1a24bc2331263d517784aeeba() { echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_function|'"$1|$#"; }; f_check_59ff4fc1a24bc2331263d517784aeeba 'check_59ff4fc1a24bc2331263d517784aeeba_function_value'
echo 'check_59ff4fc1a24bc2331263d517784aeeba_small_done'
echo; echo 'check_1c641a0f5d5ae943733e6484a4fd1dc5_transport_done'
echo '000000' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '000000' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_control'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e'"'"''
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_control' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_math'"'"' "$((823*284+16))"'
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_math' "$((823*284+16))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_pid' "$$"
sh -c 'set -- '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg1'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_positional'"'"' "$#|$1|$2"'
set -- 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg1' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_arg2'; printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_positional' "$#|$1|$2"
sh -c 'f_check_60ae46c9819c822ab7d4c3f5b50e8d5e() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_function'"'"' "$1|$#"; }; f_check_60ae46c9819c822ab7d4c3f5b50e8d5e '"'"'check_60ae46c9819c822ab7d4c3f5b50e8d5e_function_value'"'"''
f_check_60ae46c9819c822ab7d4c3f5b50e8d5e() { printf '\n%s|%s\n' 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_small_function' "$1|$#"; }; f_check_60ae46c9819c822ab7d4c3f5b50e8d5e 'check_60ae46c9819c822ab7d4c3f5b50e8d5e_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

← Back to home