Pottr.io Honeypot Monitoring Dashboard

Pottr tracks SSH login attempts, external connections, web probes, and nmap scan results to help you spot malicious IPs and patterns fast.

Use the map and charts below to explore the last 7 days of activity. The buttons show what’s happened today since midnight.

Share on Twitter Share on Reddit Share on LinkedIn

⚠ Most recent attacker

LIVE
45.153.34.149
The Netherlands · Europe
AS197170 TechTies Inc.
Total SSH attempts2,484
Distinct usernames251
First seen2026-06-12T05:08
Last seen2026-07-19 19:36
Usernames tried: adminuserubuntudeploytestclaude

Recent SSH attacks (updated 19:36 UTC)

Attacker IPUsernameAttemptsLast hit
45.153.34.149 gns3 6 19:36:16
45.153.34.149 sam 26 19:36:06
45.153.34.149 test 54 19:36:01
45.153.34.149 deploy 74 19:35:51
147.50.227.79 mongodb 2 19:35:46
179.34.71.233 admin 2 19:35:46
195.178.110.228 apache 32 19:35:26
179.27.99.9 potato 30 19:34:56
58.229.141.26 ftptest 2 19:34:41
20.193.152.133 potato 28 19:34:41
104.211.93.193 ftptest 2 19:34:16
195.178.110.228 administrator 48 19:34:01
Global Activity Map (last 7 days)
Today’s inserts:

7-Day Insert Totals

Web Visits

10913

last 7 days
Nmap OS Scans

27

last 7 days
Nmap Port Scans

62

last 7 days
External Connections

105410

last 7 days
SSH Attempts

1787

last 7 days

Activity (Last 7 Days)

Web Visits

Nmap OS Scans

Nmap Port Scans

External Connections

SSH Attempts