Fleet Security & Threat Audit Dashboard
Duration: 1m 20s
Failed SSH Logins (7d)
6,741
HTTP Exploit Probes
29,688
Active CrowdSec Bans
22
Targeted Accounts
20

Daily Attack Timeline (7-Day Trend)

Daily Attacks by Server Host

Targeted Accounts & Credential Spraying Analysis

Breakdown of targeted usernames across SSH authentication attempts. Highlights attempts matching existing local system accounts.

Targeted Account Attack Attempts Share of Attacks Account Status
admin 596 24.2% Default / Non-Existent
ubuntu 518 21.0% Default / Non-Existent
user 475 19.3% Default / Non-Existent
debian 268 10.9% Default / Non-Existent
test 115 4.7% Default / Non-Existent
oracle 62 2.5% Default / Non-Existent
ftpuser 48 1.9% Default / Non-Existent
deploy 47 1.9% Default / Non-Existent
postgres 45 1.8% Default / Non-Existent
dev 41 1.7% Default / Non-Existent
testuser 40 1.6% Default / Non-Existent
steam 33 1.3% Default / Non-Existent
teamspeak 28 1.1% Default / Non-Existent
git 27 1.1% Default / Non-Existent
test1 26 1.1% Default / Non-Existent
from 18 0.7% Default / Non-Existent
support 12 0.5% Default / Non-Existent
ubnt 11 0.4% Default / Non-Existent
installer 10 0.4% Default / Non-Existent
mysql 8 0.3% Default / Non-Existent

CrowdSec Detection & Escape Audit

Cross-reference of all observed attacking IPs against CrowdSec 7-day alerts and active ban decisions.

Undetected IPs (Sub-threshold)
1,095
Attacked below alert threshold
Unbanned Attacking IPs
1,186
No active firewall drop enforced
Top Sub-Threshold Attacking IP Host Attacked Observed Hits Country / ASN CrowdSec Status
45.148.10.203 c1.mwan.dev 141 The Netherlands • AS48090 TECHOFF SRV LIMITED Undetected
204.76.203.213 c1.mwan.dev 139 The Netherlands • AS51396 Pfcloud UG Undetected
78.153.140.151 c1.mwan.dev 133 United Kingdom • AS202306 HOSTGLOBAL.PLUS LTD Undetected
161.97.105.150 c1.mwan.dev 127 France • AS51167 Contabo GmbH Undetected
94.154.46.249 c2.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
34.12.86.3 c2.mwan.dev 185 Netherlands • AS396982 Google LLC Alerted (No Ban)
130.12.180.117 c2.mwan.dev 74 The Netherlands • AS202412 Omegatech LTD Alerted (No Ban)
129.146.171.236 c2.mwan.dev 49 United States • AS31898 Oracle Corporation Alerted (No Ban)
35.196.8.175 c3.mwan.dev 553 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.247 c3.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
130.12.180.117 c3.mwan.dev 38 The Netherlands • AS202412 Omegatech LTD Alerted (No Ban)
82.152.211.215 c3.mwan.dev 36 Germany • AS16276 OVH SAS Alerted (No Ban)
34.139.8.35 home.mwan.dev 10050 United States • AS396982 Google LLC Undetected
20.48.251.3 home.mwan.dev 4976 Canada • AS8075 Microsoft Corporation Undetected
158.23.184.117 home.mwan.dev 4462 Mexico • AS8075 Microsoft Corporation Undetected
4.205.62.107 home.mwan.dev 4306 Canada • AS8075 Microsoft Corporation Undetected

Infrastructure Fleet Posture

Host Status CrowdSec SSH Attacks (7d) Web Probes (7d) Stale Daemons Reboot
c1.mwan.dev Online 3 Bans (50 alerts) 370 184 5 services No
c2.mwan.dev Online 10 Bans (50 alerts) 301 919 5 services No
c3.mwan.dev Online 1 Bans (50 alerts) 354 1,112 5 services No
home.mwan.dev Online 8 Bans (50 alerts) 5,716 27,473 Clean No