Fleet Security & Threat Audit Dashboard
Duration: 0m 50s
Failed SSH Logins (30d)
32,783
HTTP Exploit Probes
114,718
Active CrowdSec Bans
22
Targeted Accounts
20

Daily Attack Timeline (30-Day Trend)

Daily Attacks by Server Host

Targeted Accounts & Credential Spraying Analysis

Breakdown of targeted usernames across SSH authentication attempts. Highlights attempts matching existing local system accounts.

Targeted Account Attack Attempts Share of Attacks Account Status
admin 3,702 30.5% Default / Non-Existent
ubuntu 2,609 21.5% Default / Non-Existent
user 1,434 11.8% Default / Non-Existent
test 640 5.3% Default / Non-Existent
debian 565 4.7% Default / Non-Existent
masonwan 525 4.3% Default / Non-Existent
from 370 3.1% Default / Non-Existent
ftpuser 313 2.6% Default / Non-Existent
postgres 258 2.1% Default / Non-Existent
deploy 249 2.1% Default / Non-Existent
support 242 2.0% Default / Non-Existent
oracle 228 1.9% Default / Non-Existent
dev 148 1.2% Default / Non-Existent
solana 141 1.2% Default / Non-Existent
ubnt 106 0.9% Default / Non-Existent
sol 99 0.8% Default / Non-Existent
guest 90 0.7% Default / Non-Existent
solv 88 0.7% Default / Non-Existent
user1 75 0.6% Default / Non-Existent
centos 68 0.6% Default / Non-Existent

CrowdSec Detection & Escape Audit

Cross-reference of all observed attacking IPs against CrowdSec 7-day alerts and active ban decisions.

Undetected IPs (Sub-threshold)
3,650
Attacked below alert threshold
Unbanned Attacking IPs
3,766
No active firewall drop enforced
Top Sub-Threshold Attacking IP Host Attacked Observed Hits Country / ASN CrowdSec Status
2.57.121.25 c1.mwan.dev 182 United Kingdom • AS47890 UNMANAGED LTD Undetected
165.22.217.106 c1.mwan.dev 156 India • AS14061 DigitalOcean, LLC Undetected
137.184.112.11 c1.mwan.dev 136 United States • AS14061 DigitalOcean, LLC Undetected
2.57.121.112 c1.mwan.dev 134 United Kingdom • AS47890 UNMANAGED LTD Undetected
94.154.46.249 c2.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
211.62.61.190 c2.mwan.dev 331 South Korea • AS4766 Korea Telecom Undetected
115.248.8.65 c2.mwan.dev 299 India • AS18101 Reliance Communications Ltd.DAKC MUMBAI Undetected
2.57.121.25 c2.mwan.dev 187 United Kingdom • AS47890 UNMANAGED LTD Undetected
35.196.8.175 c3.mwan.dev 553 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.247 c3.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
2.57.121.25 c3.mwan.dev 185 United Kingdom • AS47890 UNMANAGED LTD Undetected
2.57.121.112 c3.mwan.dev 138 United Kingdom • AS47890 UNMANAGED LTD Undetected
34.139.8.35 home.mwan.dev 10050 United States • AS396982 Google LLC Undetected
20.48.251.3 home.mwan.dev 4976 Canada • AS8075 Microsoft Corporation Undetected
158.23.184.117 home.mwan.dev 4462 Mexico • AS8075 Microsoft Corporation Undetected
4.205.62.107 home.mwan.dev 4306 Canada • AS8075 Microsoft Corporation Undetected

Infrastructure Fleet Posture

Host Status CrowdSec SSH Attacks ({days}d) Web Probes ({days}d) Stale Daemons Reboot
c1.mwan.dev Online 3 Bans (105 alerts) 5,013 184 5 services No
c2.mwan.dev Online 10 Bans (55 alerts) 7,397 919 5 services No
c3.mwan.dev Online 1 Bans (65 alerts) 6,938 1,112 5 services No
home.mwan.dev Online 8 Bans (107 alerts) 13,435 112,503 Clean No