Honeypot Live Stats — 33 connections today from 21 unique IPs (33 total, 21 unique IPs all-time)
Kris Pham
· Reading time: 9 minutes · Admin

Honeypot report: 2026-11-02

47 connections hit the honeypot on 2026-11-02, from 25 unique IP(s).

Top source IPs

139.19.117.131 — 7 connections
195.178.110.217 — 7 connections
181.27.89.154 — 2 connections
27.130.141.108 — 2 connections
200.106.187.27 — 2 connections

Commands attempted

sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_control'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a'"'"''
printf '\n%s|%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_control' 'check_3d923aaa3a9226eb64588330853f064a'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_math'"'"' "$((808*154+49))"'
printf '\n%s|%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_math' "$((808*154+49))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_pid' "$$"
sh -c 'set -- '"'"'check_3d923aaa3a9226eb64588330853f064a_arg1'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_positional'"'"' "$#|$1|$2"'
set -- 'check_3d923aaa3a9226eb64588330853f064a_arg1' 'check_3d923aaa3a9226eb64588330853f064a_arg2'; printf '\n%s|%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_positional' "$#|$1|$2"
sh -c 'f_check_3d923aaa3a9226eb64588330853f064a() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_function'"'"' "$1|$#"; }; f_check_3d923aaa3a9226eb64588330853f064a '"'"'check_3d923aaa3a9226eb64588330853f064a_function_value'"'"''
f_check_3d923aaa3a9226eb64588330853f064a() { printf '\n%s|%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_function' "$1|$#"; }; f_check_3d923aaa3a9226eb64588330853f064a 'check_3d923aaa3a9226eb64588330853f064a_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_3d923aaa3a9226eb64588330853f064a_small_done'"'"''
printf '\n%s\n' 'check_3d923aaa3a9226eb64588330853f064a_small_done'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_control'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01'"'"''
printf '\n%s|%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_control' 'check_4b960e6998ade0d8c45eddbb366e9d01'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_math'"'"' "$((408*717+48))"'
printf '\n%s|%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_math' "$((408*717+48))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_pid' "$$"
sh -c 'set -- '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_arg1'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_positional'"'"' "$#|$1|$2"'
set -- 'check_4b960e6998ade0d8c45eddbb366e9d01_arg1' 'check_4b960e6998ade0d8c45eddbb366e9d01_arg2'; printf '\n%s|%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_positional' "$#|$1|$2"
sh -c 'f_check_4b960e6998ade0d8c45eddbb366e9d01() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_function'"'"' "$1|$#"; }; f_check_4b960e6998ade0d8c45eddbb366e9d01 '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_function_value'"'"''
f_check_4b960e6998ade0d8c45eddbb366e9d01() { printf '\n%s|%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_function' "$1|$#"; }; f_check_4b960e6998ade0d8c45eddbb366e9d01 'check_4b960e6998ade0d8c45eddbb366e9d01_function_value'
sh -c 'printf '"'"'\n%s\n'"'"' '"'"'check_4b960e6998ade0d8c45eddbb366e9d01_small_done'"'"''
printf '\n%s\n' 'check_4b960e6998ade0d8c45eddbb366e9d01_small_done'
echo; echo 'check_a4fbd6b904757d0281198ada9df4c958_transport_done'
echo 'check_385ab5e87f182b43006507e3a24abb24_small_control|check_385ab5e87f182b43006507e3a24abb24'
echo 'check_385ab5e87f182b43006507e3a24abb24_small_math|'"$((469*983+71))"
echo 'check_385ab5e87f182b43006507e3a24abb24_small_pid|'"$$"
set -- 'check_385ab5e87f182b43006507e3a24abb24_arg1' 'check_385ab5e87f182b43006507e3a24abb24_arg2'; echo 'check_385ab5e87f182b43006507e3a24abb24_small_positional|'"$#|$1|$2"
f_check_385ab5e87f182b43006507e3a24abb24() { echo 'check_385ab5e87f182b43006507e3a24abb24_small_function|'"$1|$#"; }; f_check_385ab5e87f182b43006507e3a24abb24 'check_385ab5e87f182b43006507e3a24abb24_function_value'
echo 'check_385ab5e87f182b43006507e3a24abb24_small_done'
echo 'check_b571e554adf8e77760d3e2a8f190796f_small_control|check_b571e554adf8e77760d3e2a8f190796f'
echo 'check_b571e554adf8e77760d3e2a8f190796f_small_math|'"$((588*240+84))"
echo 'check_b571e554adf8e77760d3e2a8f190796f_small_pid|'"$$"
set -- 'check_b571e554adf8e77760d3e2a8f190796f_arg1' 'check_b571e554adf8e77760d3e2a8f190796f_arg2'; echo 'check_b571e554adf8e77760d3e2a8f190796f_small_positional|'"$#|$1|$2"
f_check_b571e554adf8e77760d3e2a8f190796f() { echo 'check_b571e554adf8e77760d3e2a8f190796f_small_function|'"$1|$#"; }; f_check_b571e554adf8e77760d3e2a8f190796f 'check_b571e554adf8e77760d3e2a8f190796f_function_value'
echo 'check_b571e554adf8e77760d3e2a8f190796f_small_done'
echo; echo 'check_1a18e1f36fc1a88d0e529c833968ade1_transport_done'
echo '!root' | sudo -S sh -c 'chmod +x '\''/root/.16'\''' || echo '!root' | sudo -S chmod +x '/root/.16' || sh -c 'chmod +x '\''/root/.16'\''' || chmod +x '/root/.16'
chmod +x '/root/.16'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_control'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7'"'"''
printf '\n%s|%s\n' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_control' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7'
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_math'"'"' "$((468*973+55))"'
printf '\n%s|%s\n' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_math' "$((468*973+55))"
sh -c 'printf '"'"'\n%s|%s\n'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_pid'"'"' "$$"'
printf '\n%s|%s\n' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_pid' "$$"
sh -c 'set -- '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_arg1'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_arg2'"'"'; printf '"'"'\n%s|%s\n'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_positional'"'"' "$#|$1|$2"'
set -- 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_arg1' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_arg2'; printf '\n%s|%s\n' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_positional' "$#|$1|$2"
sh -c 'f_check_8a22876ad7ddf7ebb807f7fcda3be6e7() { printf '"'"'\n%s|%s\n'"'"' '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_function'"'"' "$1|$#"; }; f_check_8a22876ad7ddf7ebb807f7fcda3be6e7 '"'"'check_8a22876ad7ddf7ebb807f7fcda3be6e7_function_value'"'"''
f_check_8a22876ad7ddf7ebb807f7fcda3be6e7() { printf '\n%s|%s\n' 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_small_function' "$1|$#"; }; f_check_8a22876ad7ddf7ebb807f7fcda3be6e7 'check_8a22876ad7ddf7ebb807f7fcda3be6e7_function_value'

Auto-generated from the Cowrie session logs. Updates automatically while the day is still in progress.

This day has ended — the numbers above are final and will not change further.

← Back to home