Skip to main contentSkip to main content EchoAtlas | Knowledge HubObservatory Honeypot
Logged-in deception control surface
Public honeypot traffic is normalized into origin stars, service exposure, transient signals, and attack-vector mix.
Target EchoAtlas/honeypot
Observations
38,057
Last 24h service hits
Source stars
15
Unique source regions
Brightest vector
SSH brute
38% of traffic
Threat magnitude
8.8
6 active spikes
Sky chart
Origin stars and country constellations from honeypot traffic.
Vector ring
- SSH credential brute-force38%
- HTTP vulnerability scanning24%
- Known CVE exploitation14%
- IoT and Telnet probing11%
- Redis unauthenticated abuse8%
- Other or unclassified5%
Light curve
Ten-minute observations over the last 24 hours.
Transient signals
Latest honeypot observations, ranked by recency.
TimeMagServiceObservation
- 1m agoM4ssh-trapCredential storm from 217.205.177.65
- 3m agoM3es-decoyCluster health probe from 191.61.87.29
- 5m agoM2tls-shadowTLS fingerprint mismatch from 20.75.188.185
- 8m agoM3ssh-trapFailed login root@17.6.132.1 with common password
- 12m agoM2tls-shadowTLS fingerprint mismatch from 101.168.75.183
- 14m agoM3es-decoyCluster health probe from 29.192.188.191
- 17m ago
Telescope array
- :22ssh-trapSSH14,829
- :23telnet-decoyTelnet3,204
- :80web-mirrorHTTP9,416
- :443tls-shadowHTTPS5,188
- :2375docker-baitDocker1,820
- :3306mysql-mockMySQL992
- :6379redis-lureRedis2,147
Honeypot leaderboard
Honeypots ranked by recency-weighted decay score. Active = decay > 0.5; decayed = ≤ 0.1.
No persisted honeypot metrics yet.
The deterministic dashboard above remains available while the dedicated Observatory database is provisioned.
M4
ssh-trap
Credential storm from 192.61.89.178
21m agoM3ssh-trapFailed login root@175.229.172.4 with common password23m agoM5docker-baitContainer create probe from 112.179.181.14926m agoM2mysql-mockMySQL root connection probe from 141.15.59.24229m agoM3telnet-decoyMirai-family banner from 7.66.109.20731m agoM4redis-lureCONFIG SET cron attempt from 8.55.188.7334m agoM2mysql-mockMySQL root connection probe from 72.226.145.24137m agoM5docker-baitContainer create probe from 73.226.146.135Constellations
- 014.4k
- 022.0k
- 031.9k
- 041.8k
- 05838
- 06743
- 07734
- 08586
Credential spectroscopy
- 2,841
- 1,923
- 1,487
- 988
- 742
- 518
- 411
- 302