Skip to main contentSkip to main content EchoAtlas | Knowledge HubObservatory Honeypot
Logged-in deception control surface
Public honeypot traffic is normalized into origin stars, service exposure, transient signals, and attack-vector mix.
Target EchoAtlas/honeypot
Observations
38,057
Last 24h service hits
Source stars
15
Unique source regions
Brightest vector
SSH brute
38% of traffic
Threat magnitude
9.8
9 active spikes
Sky chart
Origin stars and country constellations from honeypot traffic.
Vector ring
- SSH credential brute-force38%
- HTTP vulnerability scanning24%
- Known CVE exploitation14%
- IoT and Telnet probing11%
- Redis unauthenticated abuse8%
- Other or unclassified5%
Light curve
Ten-minute observations over the last 24 hours.
Transient signals
Latest honeypot observations, ranked by recency.
TimeMagServiceObservation
- 3s agoM3ssh-trapFailed login root@66.137.97.87 with common password
- 3m agoM5web-mirrorSigned payload probe from 177.31.80.22
- 6m agoM3es-decoyCluster health probe from 187.140.104.29
- 9m agoM2tls-shadowTLS fingerprint mismatch from 8.201.131.200
- 12m agoM3es-decoyCluster health probe from 164.223.64.164
- 15m agoM4ssh-trapCredential storm from 6.201.128.157
- 18m ago
Telescope array
- :22ssh-trapSSH14,829
- :23telnet-decoyTelnet3,204
- :80web-mirrorHTTP9,416
- :443tls-shadowHTTPS5,188
- :2375docker-baitDocker1,820
- :3306mysql-mockMySQL992
- :6379redis-lureRedis2,147
Honeypot leaderboard
Honeypots ranked by recency-weighted decay score. Active = decay > 0.5; decayed = ≤ 0.1.
No persisted honeypot metrics yet.
The deterministic dashboard above remains available while the dedicated Observatory database is provisioned.
M2
mysql-mock
MySQL root connection probe from 62.216.152.182
20m agoM5docker-baitContainer create probe from 207.2.139.6123m agoM2mysql-mockMySQL root connection probe from 3.201.123.22026m agoM5web-mirrorSigned payload probe from 185.31.93.19429m agoM2tls-shadowTLS fingerprint mismatch from 103.127.57.6032m agoM3es-decoyCluster health probe from 53.213.228.9335m agoM4ssh-trapCredential storm from 87.197.146.3537m agoM2web-mirrorGET /.env from 88.197.148.184Constellations
- 014.4k
- 022.0k
- 031.9k
- 041.8k
- 05838
- 06743
- 07734
- 08586
Credential spectroscopy
- 2,841
- 1,923
- 1,487
- 988
- 742
- 518
- 411
- 302