Fleet Security & Threat Audit Dashboard
Duration: 0m 27s
Failed SSH Logins (7d)
15,535
HTTP Exploit Probes
15,953
Active CrowdSec Bans
27
Targeted Accounts
20

Daily Attack Timeline (7-Day Trend)

Daily Attacks by Server Host

Targeted Accounts & Credential Spraying Analysis

Breakdown of targeted usernames across SSH authentication attempts. Highlights attempts matching existing local system accounts.

Targeted Account Attack Attempts Share of Attacks Account Status
admin 743 19.3% Default / Non-Existent
ubuntu 666 17.3% Default / Non-Existent
test 236 6.1% Default / Non-Existent
user 229 5.9% Default / Non-Existent
wallet 226 5.9% Default / Non-Existent
crypto 191 5.0% Default / Non-Existent
ec2-user 178 4.6% Default / Non-Existent
cat 163 4.2% Default / Non-Existent
oracle 161 4.2% Default / Non-Existent
bitcoin 157 4.1% Default / Non-Existent
ftpuser 144 3.7% Default / Non-Existent
centos 137 3.6% Default / Non-Existent
deploy 94 2.4% Default / Non-Existent
user1 92 2.4% Default / Non-Existent
postgres 86 2.2% Default / Non-Existent
from 84 2.2% Default / Non-Existent
blockchain 69 1.8% Default / Non-Existent
support 59 1.5% Default / Non-Existent
temp 48 1.2% Default / Non-Existent
debian 18 0.5% Default / Non-Existent

CrowdSec Detection & Escape Audit

Cross-reference of all observed attacking IPs against CrowdSec 7-day alerts and active ban decisions.

Undetected IPs (Sub-threshold)
1,150
Attacked below alert threshold
Unbanned Attacking IPs
2,388
No active firewall drop enforced
Top Sub-Threshold Attacking IP Host Attacked Observed Hits Country / ASN CrowdSec Status
94.154.46.243 c1.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
94.154.46.249 c1.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
176.65.144.71 c1.mwan.dev 178 Switzerland • AS209413 DEDIK SERVICES LIMITED Alerted (No Ban)
34.62.205.231 c1.mwan.dev 101 Belgium • AS396982 Google LLC Alerted (No Ban)
94.154.46.246 c2.mwan.dev 509 United States • AS202412 Omegatech LTD Alerted (No Ban)
89.116.173.92 c2.mwan.dev 507 Lithuania • AS46475 Limestone Networks, Inc. Alerted (No Ban)
192.161.173.78 c2.mwan.dev 498 United States • AS36352 HostPapa Alerted (No Ban)
94.154.46.249 c2.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
94.154.46.243 c3.mwan.dev 596 United States • AS202412 Omegatech LTD Alerted (No Ban)
194.26.192.18 c3.mwan.dev 584 The Netherlands • AS210558 1337 Services GmbH Undetected
35.196.8.175 c3.mwan.dev 553 United States • AS396982 Google LLC Alerted (No Ban)
35.245.185.138 c3.mwan.dev 526 United States • AS396982 Google LLC Alerted (No Ban)
103.215.74.26 home.mwan.dev 1762 United States • AS150303 SoloRDP Undetected
34.20.157.78 home.mwan.dev 464 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.245 home.mwan.dev 324 United States • AS202412 Omegatech LTD Alerted (No Ban)
4.204.224.164 home.mwan.dev 262 Canada • AS8075 Microsoft Corporation Alerted (No Ban)

Infrastructure Fleet Posture

Host Status CrowdSec SSH Attacks ({days}d) Web Probes ({days}d) Stale Daemons Reboot
c1.mwan.dev Online 0 Bans (476 alerts) 916 2,036 Clean No
c2.mwan.dev Online 4 Bans (276 alerts) 1,095 4,094 10 services No
c3.mwan.dev Online 10 Bans (2406 alerts) 5,102 4,480 Clean No
home.mwan.dev Online 13 Bans (3214 alerts) 8,422 5,343 Clean No