Pottr tracks SSH login attempts, external connections, web probes, and nmap scan results to help you spot malicious IPs and patterns fast.
Use the map and charts below to explore the last 7 days of activity. The buttons show what’s happened today since midnight.
| Total SSH attempts | 1,340 |
| Distinct usernames | 248 |
| First seen | 2026-07-25 11:42 |
| Last seen | 2026-08-18 03:32 |
| Attacker IP | Username | Attempts | Last hit |
|---|---|---|---|
| 91.92.40.202 | ec2-user | 10 | 03:32:37 |
| 91.92.40.202 | admin2 | 8 | 03:32:32 |
| 91.92.40.202 | sam | 14 | 03:32:17 |
| 91.92.40.202 | deployer | 22 | 03:31:57 |
| 91.92.40.202 | frappe | 16 | 03:31:42 |
| 91.92.40.202 | administrator | 10 | 03:31:37 |
| 2.57.122.238 | eth | 120 | 03:31:37 |
| 91.92.40.202 | tomcat | 4 | 03:31:27 |
| 91.92.40.202 | ubuntu | 44 | 03:31:22 |
| 157.245.213.135 | vyos | 6 | 03:31:17 |
| 91.92.40.202 | developer | 12 | 03:31:17 |
| 91.92.40.202 | sysupdate | 6 | 03:31:12 |
39028
last 7 days25
last 7 days11
last 7 days79064
last 7 days796
last 7 days