Skip to main contentSkip to main content EchoAtlas | Knowledge HubObservatory Honeypot
Logged-in deception control surface
Public honeypot traffic is normalized into origin stars, service exposure, transient signals, and attack-vector mix.
Target EchoAtlas/honeypot
Observations
38,057
Last 24h service hits
Source stars
15
Unique source regions
Brightest vector
SSH brute
38% of traffic
Threat magnitude
9.2
7 active spikes
Sky chart
Origin stars and country constellations from honeypot traffic.
Vector ring
- SSH credential brute-force38%
- HTTP vulnerability scanning24%
- Known CVE exploitation14%
- IoT and Telnet probing11%
- Redis unauthenticated abuse8%
- Other or unclassified5%
Light curve
Ten-minute observations over the last 24 hours.
Transient signals
Latest honeypot observations, ranked by recency.
TimeMagServiceObservation
- 6s agoM3ssh-trapFailed login root@211.174.216.169 with common password
- 3m agoM4redis-lureCONFIG SET cron attempt from 130.53.20.89
- 6m agoM3ssh-trapFailed login root@193.111.54.22 with common password
- 8m agoM5docker-baitContainer create probe from 175.50.173.212
- 12m agoM3ssh-trapFailed login root@207.174.210.83 with common password
- 15m agoM4redis-lureCONFIG SET cron attempt from 115.158.106.107
Telescope array
- :22ssh-trapSSH14,829
- :23telnet-decoyTelnet3,204
- :80web-mirrorHTTP9,416
- :443tls-shadowHTTPS5,188
- :2375docker-baitDocker1,820
- :3306mysql-mockMySQL992
- :6379redis-lureRedis2,147
Honeypot leaderboard
Honeypots ranked by recency-weighted decay score. Active = decay > 0.5; decayed = ≤ 0.1.
No persisted honeypot metrics yet.
The deterministic dashboard above remains available while the dedicated Observatory database is provisioned.
17m ago
M2
web-mirror
GET /.env from 18.178.224.18
21m agoM5web-mirrorSigned payload probe from 191.127.217.23023m agoM2web-mirrorGET /.env from 43.152.236.23126m agoM5web-mirrorSigned payload probe from 202.111.68.8828m agoM4redis-lureCONFIG SET cron attempt from 48.133.217.2332m agoM2mysql-mockMySQL root connection probe from 183.218.229.23135m agoM5docker-baitContainer create probe from 50.133.220.6637m agoM2mysql-mockMySQL root connection probe from 209.72.141.235Constellations
- 014.4k
- 022.0k
- 031.9k
- 041.8k
- 05838
- 06743
- 07734
- 08586
Credential spectroscopy
- 2,841
- 1,923
- 1,487
- 988
- 742
- 518
- 411
- 302