Observatory
Real-time threat telemetry from our distributed sensor network. Observing the noise at the edge of the internet.
Synthetic Data: All metrics displayed are aggregated from research infrastructure. No personal data is collected or displayed. Sampling rate: ~5%.
// Attack Origins (7d)
// Event Stream
// Noise Taxonomy
SSH Brute Force
0Credential stuffing and dictionary attacks targeting SSH services.
SMTP Probes
0Mail server enumeration and open relay testing.
Web Crawlers
0Automated vulnerability scanners and reconnaissance bots.
Telnet Scanners
0IoT botnet propagation attempts (Mirai variants).
Our sensor network consists of distributed honeypots deployed across multiple regions. Data is sampled at approximately 5% to manage volume while maintaining statistical significance. All IP addresses are anonymized before storage. Geographic attribution is approximate and based on GeoIP databases.