Cowrie Honeypot Stats
Live stats from a Cowrie SSH/telnet honeypot, refreshed periodically.
Last refreshed: 2026-09-15 04:55 UTC · covering 2026-08-25 to 2026-09-15
72389
Total Sessions
1808
Unique Source IPs
69023
Login Attempts
51054 accepted / 17969 rejected
Connections per Day
2026-08-25
3680
2026-08-26
15971
2026-08-28
294
2026-08-29
184
2026-08-31
102
2026-09-01
224
2026-09-02
90
2026-09-03
103
2026-09-04
89
2026-09-05
375
2026-09-06
132
2026-09-07
1817
2026-09-08
863
2026-09-09
108
2026-09-10
281
2026-09-11
3815
2026-09-12
5010
2026-09-13
34196
2026-09-14
4318
2026-09-15
737
Top Source IPs
| Source IP | Connections |
|---|
| 45.6.224.123 | 29045 |
| 110.173.190.221 | 10308 |
| 37.111.53.110 | 3378 |
| 217.60.255.130 | 3173 |
| 103.195.81.146 | 3162 |
| 103.60.204.198 | 3130 |
| 103.82.210.181 | 2683 |
| 87.107.6.203 | 1411 |
| 67.205.146.133 | 1199 |
| 157.245.149.24 | 833 |
Top Usernames Attempted
| Username | Attempts |
|---|
| root | 51113 |
| ubuntu | 1675 |
| admin | 975 |
| centoc | 506 |
| user | 360 |
| jacob | 332 |
| test | 252 |
| toor | 225 |
| support | 222 |
| enable\x00 | 219 |
Top Passwords Attempted
| Password | Attempts |
|---|
| 2974 |
| 123456 | 619 |
| admin | 355 |
| 123 | 286 |
| 1234 | 241 |
| password | 211 |
| 12345678 | 205 |
| root | 170 |
| 12345 | 133 |
| 1 | 130 |
Top Username:Password Pairs
| Pair | Attempts |
|---|
| root:admin | 150 |
| admin:admin | 110 |
| enable\x00:linuxshell\x00 | 110 |
| enable\x00:system\x00 | 109 |
| shell\x00:sh\x00 | 109 |
| user:user | 68 |
| system\x00:shell\x00 | 68 |
| support:support | 67 |
| root:Aa123456@ | 57 |
| root: | 54 |
Top Client Versions
| Client / Banner | Count |
|---|
| SSH-2.0-Go | 49378 |
| SSH-2.0-libssh_0.10.6 | 6511 |
| SSH-2.0-libssh_0.9.6 | 6168 |
| SSH-2.0-libssh_0.10.4 | 3173 |
| SSH-2.0-libssh_0.11.2 | 1412 |
| SSH-2.0-OpenSSH_7.4 | 1369 |
| SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3 | 124 |
| SSH-2.0-libssh2_1.11.1 | 110 |
| SSH-2.0-libssh_0.10.5 | 84 |
| SSH-2.0-OpenSSH-keyscan | 70 |