Skip to content
LIVE

This AI-agent host fights back.

This is a real public Linux box running InnerWarden around an agent-capable environment. The feed below shows the pressure that hits the machine your AI worker depends on: network probes, brute force, suspicious commands, and hostile sources. InnerWarden decides locally before the host around the agent becomes someone else's machine.

130.162.171.105protected agent host · public IP · no WAF · no human in the loop
Reconnecting to the live host…
One machine in that storm

Where the attackers hitting this server come from

The real source IPs probing this one box, plotted live as they land, each one decided locally by InnerWarden.

Attack origins
Quiet on the wire right now0sources seen (7d)
Agent host
Active (24h)
Quiet (7d)
What the operator sees in Telegram
InnerWarden Bot
Agent guardrail · command + tool-call screening · local decisions
online
Quiet on the wire. The agent host is awake; nothing has tripped a detector in this window.
Hit the host. Watch the guard decide.
Pick an attack. Run it. Within 5 seconds you should see your IP land on the map, get a verdict in the feed, and (if you push hard enough) end up in AbuseIPDB.
Open a Terminal on your computer (Linux/macOS: Ctrl+Alt+T or just Terminal. Windows: search PowerShell). Paste a script, press Enter, scroll up and watch InnerWarden decide what reaches the protected agent host.
1. SSH brute-force run
Ten common usernames in a tight loop, each attempting publickey auth with an empty key (-i /dev/null). Triggers ssh_bruteforce + sliding-window detector via the "Failed publickey" line that sshd logs on every hardened server. Expect: block decision within ~2 seconds, IP added to the kernel-side blocklist via XDP.
for user in admin root test deploy postgres mysql nginx www backup oracle; do
  ssh -i /dev/null -o ConnectTimeout=2 -o StrictHostKeyChecking=no -o PreferredAuthentications=publickey $user@130.162.171.105 2>/dev/null
done
2. Credential stuffing
Twenty distinct usernames from one IP. Different shape than brute-force; trips credential_stuffing + the distinct-user-per-IP detector. Expect: a different verdict line and threat-DNA fingerprint.
for i in $(seq 1 20); do
  ssh -i /dev/null -o ConnectTimeout=1 -o PreferredAuthentications=publickey user$i@130.162.171.105 2>/dev/null
done
3. Single probe (just to see yourself)
One handshake, one rejected auth. The lowest-impact way to put your IP on the map and prove the pipeline works end-to-end.
ssh -i /dev/null -o ConnectTimeout=2 -o PreferredAuthentications=publickey test@130.162.171.105
These commands are safe to run from your machine. They only generate failed SSH auth attempts; nothing gets installed, nothing gets modified locally. Works on Linux, macOS, and Windows (PowerShell).

Live protected agent host. One real Linux box on a public IP, defended only by InnerWarden. This is the infrastructure layer an AI agent would rely on: filesystem, network, packages, credentials, and tool calls. No WAF, no managed firewall, no human watching.

Go ahead. Try it. The same host-level guardrails that catch SSH brute-force, credential stuffing, port scanning, reverse shells, fileless payloads, ransomware, DNS tunneling, and privilege escalation also give an agent a safer machine to work from. Your IP gets fingerprinted, correlated against recent activity, and may be temporarily blocked while you test.

Now zoom back out

This is happening on every public server

The box above is one machine taking its share. These are the internet-wide numbers from the SANS Internet Storm Center, live. The same scanning is almost certainly hitting your server right now, you just have no one watching it.

Put this around your AI agent.

One command installs the cross-platform Community guardrail: it screens the commands and tool calls your agent runs, with a local dashboard. Monitor by default (no host eBPF sensor), so nothing is blocked while you connect the agent and decide what should be denied. No telemetry, no cloud control plane, no API key required.

npm install -g innerwarden
Linux, macOS, Windows · prebuilt, signed npm provenance. No sudo, no postinstall script, nothing runs at install time. Or run it once with npx innerwarden.
curl -fsSL https://innerwarden.com/free | sh
signed release, no Node required · macOS, Linux
irm https://innerwarden.com/free.exe -OutFile innerwarden.exe
Windows PowerShell
cargo install --git https://github.com/InnerWarden/inner-warden innerwarden
from source · Rust
All install methods and how to verify →
View releasesHow agent protection works
Source-available·Cross-platform · Rust·Self-hosted·No telemetry