Honeypot Live Stats — 38 connections today from 24 unique IPs (38 total, 24 unique IPs all-time)
Kris Pham
· Reading time: 9 minutes · Admin

Honeypot report: 2026-10-30

49 connections hit the honeypot on 2026-10-30, from 34 unique IP(s).

Top source IPs

2.57.122.150 — 3 connections
165.154.41.232 — 3 connections
200.104.61.214 — 2 connections
146.190.214.220 — 2 connections
181.78.23.72 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_control'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a'"'"''
printf '\n%s|%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_control' 'check_24d7b16304efe0e2fb097c752c895b5a'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_math'"'"' "$((459*817+23))"'
printf '\n%s|%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_math' "$((459*817+23))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_pid' "$$"
sh -c 'set -- '"'"'check_24d7b16304efe0e2fb097c752c895b5a_arg1'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_positional'"'"' "$#|$1|$2"'
set -- 'check_24d7b16304efe0e2fb097c752c895b5a_arg1' 'check_24d7b16304efe0e2fb097c752c895b5a_arg2'; printf '\n%s|%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_positional' "$#|$1|$2"
sh -c 'f_check_24d7b16304efe0e2fb097c752c895b5a() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_function'"'"' "$1|$#"; }; f_check_24d7b16304efe0e2fb097c752c895b5a '"'"'check_24d7b16304efe0e2fb097c752c895b5a_function_value'"'"''
f_check_24d7b16304efe0e2fb097c752c895b5a() { printf '\n%s|%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_function' "$1|$#"; }; f_check_24d7b16304efe0e2fb097c752c895b5a 'check_24d7b16304efe0e2fb097c752c895b5a_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_24d7b16304efe0e2fb097c752c895b5a_small_done'"'"''
printf '\n%s\n' 'check_24d7b16304efe0e2fb097c752c895b5a_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_control'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2'"'"''
printf '\n%s|%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_control' 'check_463ea4cbd32b35b8f804909dc90f3cf2'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_math'"'"' "$((37*566+38))"'
printf '\n%s|%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_math' "$((37*566+38))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_pid' "$$"
sh -c 'set -- '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_arg1'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_positional'"'"' "$#|$1|$2"'
set -- 'check_463ea4cbd32b35b8f804909dc90f3cf2_arg1' 'check_463ea4cbd32b35b8f804909dc90f3cf2_arg2'; printf '\n%s|%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_positional' "$#|$1|$2"
sh -c 'f_check_463ea4cbd32b35b8f804909dc90f3cf2() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_function'"'"' "$1|$#"; }; f_check_463ea4cbd32b35b8f804909dc90f3cf2 '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_function_value'"'"''
f_check_463ea4cbd32b35b8f804909dc90f3cf2() { printf '\n%s|%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_function' "$1|$#"; }; f_check_463ea4cbd32b35b8f804909dc90f3cf2 'check_463ea4cbd32b35b8f804909dc90f3cf2_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_463ea4cbd32b35b8f804909dc90f3cf2_small_done'"'"''
printf '\n%s\n' 'check_463ea4cbd32b35b8f804909dc90f3cf2_small_done'
echo; echo 'check_9cbb9064289951ee43c457a159d4f39b_transport_done'
echo 'check_617a86042bf429d565d3de368e3a6272_small_control|check_617a86042bf429d565d3de368e3a6272'
echo 'check_617a86042bf429d565d3de368e3a6272_small_math|'"$((30*615+26))"
echo 'check_617a86042bf429d565d3de368e3a6272_small_pid|'"$$"
set -- 'check_617a86042bf429d565d3de368e3a6272_arg1' 'check_617a86042bf429d565d3de368e3a6272_arg2'; echo 'check_617a86042bf429d565d3de368e3a6272_small_positional|'"$#|$1|$2"
f_check_617a86042bf429d565d3de368e3a6272() { echo 'check_617a86042bf429d565d3de368e3a6272_small_function|'"$1|$#"; }; f_check_617a86042bf429d565d3de368e3a6272 'check_617a86042bf429d565d3de368e3a6272_function_value'
echo 'check_617a86042bf429d565d3de368e3a6272_small_done'
echo 'check_217823ed02631e514057b4d74dd2da03_small_control|check_217823ed02631e514057b4d74dd2da03'
echo 'check_217823ed02631e514057b4d74dd2da03_small_math|'"$((593*279+33))"
echo 'check_217823ed02631e514057b4d74dd2da03_small_pid|'"$$"
set -- 'check_217823ed02631e514057b4d74dd2da03_arg1' 'check_217823ed02631e514057b4d74dd2da03_arg2'; echo 'check_217823ed02631e514057b4d74dd2da03_small_positional|'"$#|$1|$2"
f_check_217823ed02631e514057b4d74dd2da03() { echo 'check_217823ed02631e514057b4d74dd2da03_small_function|'"$1|$#"; }; f_check_217823ed02631e514057b4d74dd2da03 'check_217823ed02631e514057b4d74dd2da03_function_value'
echo 'check_217823ed02631e514057b4d74dd2da03_small_done'
echo; echo 'check_f0e203e1157e5108464200496755cdf9_transport_done'
echo '!root' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '!root' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_small_control'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1'"'"''
printf '\n%s|%s\n' 'check_7e0027b679d9322522d5cfc53c521ee1_small_control' 'check_7e0027b679d9322522d5cfc53c521ee1'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_small_math'"'"' "$((353*257+53))"'
printf '\n%s|%s\n' 'check_7e0027b679d9322522d5cfc53c521ee1_small_math' "$((353*257+53))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_7e0027b679d9322522d5cfc53c521ee1_small_pid' "$$"
sh -c 'set -- '"'"'check_7e0027b679d9322522d5cfc53c521ee1_arg1'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_small_positional'"'"' "$#|$1|$2"'
set -- 'check_7e0027b679d9322522d5cfc53c521ee1_arg1' 'check_7e0027b679d9322522d5cfc53c521ee1_arg2'; printf '\n%s|%s\n' 'check_7e0027b679d9322522d5cfc53c521ee1_small_positional' "$#|$1|$2"
sh -c 'f_check_7e0027b679d9322522d5cfc53c521ee1() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_7e0027b679d9322522d5cfc53c521ee1_small_function'"'"' "$1|$#"; }; f_check_7e0027b679d9322522d5cfc53c521ee1 '"'"'check_7e0027b679d9322522d5cfc53c521ee1_function_value'"'"''
f_check_7e0027b679d9322522d5cfc53c521ee1() { printf '\n%s|%s\n' 'check_7e0027b679d9322522d5cfc53c521ee1_small_function' "$1|$#"; }; f_check_7e0027b679d9322522d5cfc53c521ee1 'check_7e0027b679d9322522d5cfc53c521ee1_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

← Back to home