port254
-
Events (24h)
-
Unique IPs
-
SSH Login Attempts
-
HMI Login Attempts
-
SSH Compromised
-
HMI HTTP Compromised
Honeypots
5
SSH • S7 • Modbus • MQTT • HMI

TOP ATTACKING IPs

PROTOCOL DISTRIBUTION

TOP 3 USERNAMES

TOP 3 PASSWORDS

TOP ATTACK COUNTRIES

ATTACK TIMELINE (24H)

FAILED SSH LOGIN ATTEMPTS

LIVE SSH EVENTS (5m)

BREACHES

EXECUTED COMMANDS AFTER SSH BREACH

No commands selected.

Click "View Commands" on a breach to display details here.

INFRASTRUCTURE HEALTH

● SSH Honeypot :22 Active
● S7comm :102 Active
● Modbus TCP :502 Active
● MQTT :1883 Active
● HMI Web :80 Active
● ELK Stack :9200 Active

PROTOCOL ACTIVITY

RECENT HTTP LOGIN ATTEMPTS

REPEAT OFFENDERS (5+ ATTACKS)