Fleet Security & Threat Audit Dashboard
Duration: 0m 27s
Failed SSH Logins (7d)
15,535
HTTP Exploit Probes
15,953
Active CrowdSec Bans
27
Targeted Accounts
20

Daily Attack Timeline (7-Day Trend)

Daily Attacks by Server Host

Top Attacking Countries

Top Attacking Data Centers & ASNs

Attack Pattern & Threat Vector Statistics

Infrastructure Fleet Posture

Host Status CrowdSec SSH Attacks (7d) Web Probes (7d) Stale Daemons Reboot
c1.mwan.dev Online 0 Bans (476 alerts) 916 2,036 Clean No
c2.mwan.dev Online 4 Bans (276 alerts) 1,095 4,094 10 services No
c3.mwan.dev Online 10 Bans (2406 alerts) 5,102 4,480 Clean No
home.mwan.dev Online 13 Bans (3214 alerts) 8,422 5,343 Clean No

Targeted Accounts & Credential Spraying Analysis

Breakdown of targeted usernames across SSH authentication attempts grouped by account status. Highlights attempts matching existing local system accounts.

Targeted Account Attack Attempts Share of Attacks
Status: Local User Targeted — Accounts existing on infrastructure hosts — High Priority Threat Vector (1 accounts, 666 total attempts)
ubuntu 666 17.3%
Status: Default / Non-Existent — Generic cloud, system, and dictionary brute-force targets (19 accounts, 3,115 total attempts)
admin 743 19.3%
test 236 6.1%
user 229 5.9%
wallet 226 5.9%
crypto 191 5.0%
ec2-user 178 4.6%
cat 163 4.2%
oracle 161 4.2%
bitcoin 157 4.1%
ftpuser 144 3.7%
centos 137 3.6%
deploy 94 2.4%
user1 92 2.4%
postgres 86 2.2%
from 84 2.2%
blockchain 69 1.8%
support 59 1.5%
temp 48 1.2%
debian 18 0.5%

CrowdSec Detection & Escape Audit

Cross-reference of all observed attacking IPs against CrowdSec 7-day alerts and active ban decisions.

Undetected IPs (Sub-threshold)
1,150
Attacked below alert threshold
Unbanned Attacking IPs
2,388
No active firewall drop enforced
Top Sub-Threshold Attacking IP Host Attacked Observed Hits Country / ASN CrowdSec Status
94.154.46.243 c1.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
94.154.46.249 c1.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
176.65.144.71 c1.mwan.dev 178 Switzerland • AS209413 DEDIK SERVICES LIMITED Alerted (No Ban)
34.62.205.231 c1.mwan.dev 101 Belgium • AS396982 Google LLC Alerted (No Ban)
94.154.46.246 c2.mwan.dev 509 United States • AS202412 Omegatech LTD Alerted (No Ban)
89.116.173.92 c2.mwan.dev 507 Lithuania • AS46475 Limestone Networks, Inc. Alerted (No Ban)
192.161.173.78 c2.mwan.dev 498 United States • AS36352 HostPapa Alerted (No Ban)
94.154.46.249 c2.mwan.dev 408 United States • AS202412 Omegatech LTD Alerted (No Ban)
94.154.46.243 c3.mwan.dev 596 United States • AS202412 Omegatech LTD Alerted (No Ban)
194.26.192.18 c3.mwan.dev 584 The Netherlands • AS210558 1337 Services GmbH Undetected
35.196.8.175 c3.mwan.dev 553 United States • AS396982 Google LLC Alerted (No Ban)
35.245.185.138 c3.mwan.dev 526 United States • AS396982 Google LLC Alerted (No Ban)
103.215.74.26 home.mwan.dev 1762 United States • AS150303 SoloRDP Undetected
34.20.157.78 home.mwan.dev 464 United States • AS396982 Google LLC Alerted (No Ban)
94.154.46.245 home.mwan.dev 324 United States • AS202412 Omegatech LTD Alerted (No Ban)
4.204.224.164 home.mwan.dev 262 Canada • AS8075 Microsoft Corporation Alerted (No Ban)