Fleet Security & Threat Audit Dashboard
Duration: 1m 1s
Failed SSH Logins (7d)
16,713
HTTP Exploit Probes
13,996
Active CrowdSec Bans
31
Targeted Accounts
20

Daily Attack Timeline (7-Day Trend)

Daily Attacks by Server Host

Top Attacking Countries

Top Attacking Data Centers & ASNs

Attack Pattern & Threat Vector Statistics

Infrastructure Fleet Posture

Host Status CrowdSec SSH Attacks (7d) Web Probes (7d) Stale Daemons Reboot
c1.mwan.dev Online 8 Bans (618 alerts) 1,213 2,326 Clean No
c2.mwan.dev Online 9 Bans (320 alerts) 1,467 3,378 Clean No
c3.mwan.dev Online 7 Bans (2480 alerts) 5,462 3,514 Clean No
home.mwan.dev Online 7 Bans (3279 alerts) 8,571 4,778 Clean No

Targeted Accounts & Credential Spraying Analysis

Breakdown of targeted usernames across SSH authentication attempts grouped by account status. Highlights attempts matching existing local system accounts.

Targeted Account Attack Attempts Share of Attacks
Status: Local User Targeted — Accounts existing on infrastructure hosts — High Priority Threat Vector (1 accounts, 882 total attempts)
ubuntu 882 19.5%
Status: Default / Non-Existent — Generic cloud, system, and dictionary brute-force targets (19 accounts, 3,543 total attempts)
admin 779 17.2%
wallet 308 6.8%
crypto 275 6.1%
test 242 5.3%
user 235 5.2%
bitcoin 229 5.1%
blockchain 214 4.7%
ec2-user 178 3.9%
oracle 169 3.7%
ftpuser 163 3.6%
cat 163 3.6%
centos 138 3.0%
deploy 101 2.2%
user1 101 2.2%
from 96 2.1%
metaverse 51 1.1%
temp 50 1.1%
postgres 26 0.6%
debian 25 0.6%

CrowdSec Detection & Escape Audit

Cross-reference of all observed attacking IPs against CrowdSec 7-day alerts and active ban decisions.

Undetected IPs (Sub-threshold)
1,264
Attacked below alert threshold
Unbanned Attacking IPs
2,490
No active firewall drop enforced
Top Sub-Threshold Attacking IP Host Attacked Observed Hits Country / ASN CrowdSec Status
94.154.46.243 c1.mwan.dev 706 United States • AS202412 Omegatech LTD Alerted (No Ban)
94.154.46.249 c1.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
176.65.144.71 c1.mwan.dev 178 Switzerland • AS209413 DEDIK SERVICES LIMITED Alerted (No Ban)
207.175.217.7 c1.mwan.dev 132 Belgium • AS396982 Google LLC Alerted (No Ban)
192.161.173.78 c2.mwan.dev 600 United States • AS36352 HostPapa Alerted (No Ban)
94.154.46.246 c2.mwan.dev 509 United States • AS202412 Omegatech LTD Alerted (No Ban)
89.116.173.92 c2.mwan.dev 497 Lithuania • AS46475 Limestone Networks, Inc. Alerted (No Ban)
34.16.143.68 c2.mwan.dev 300 United States • AS396982 Google LLC Alerted (No Ban)
194.26.192.18 c3.mwan.dev 584 The Netherlands • AS210558 1337 Services GmbH Undetected
35.245.185.138 c3.mwan.dev 526 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.246 c3.mwan.dev 476 United States • AS202412 Omegatech LTD Alerted (No Ban)
87.120.104.29 c3.mwan.dev 408 Norway • AS211443 SINO WORLDWIDE TRADING LIMITED Alerted (No Ban)
103.215.74.26 home.mwan.dev 1761 United States • AS150303 SoloRDP Undetected
34.20.157.78 home.mwan.dev 499 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.245 home.mwan.dev 324 United States • AS202412 Omegatech LTD Alerted (No Ban)
4.224.45.129 home.mwan.dev 176 India • AS8075 Microsoft Corporation Undetected