Live threat observatory

Real attacker activity captured by our honeypot network. IPs masked for privacy: this is the data the platform uses to build scenarios.

LIVE ยท latest event: 18 Sept, 10:46
๐ŸŽฏ
42.058
Captured events
๐Ÿ“…
1032
Events last 7 days
๐ŸŒ
2994
Unique IPs detected
โš”๏ธ Attack types
Login attempt
30.419
Reverse tunnel
11.639
๐ŸŒ Source countries
SESweden
5616
CHSwitzerland
5067
INIndia
3377
IDIndonesia
2805
USUnited States
2478
CNChina
1980
๐Ÿ”’ Top attackers
IPCountryEventsLast seen
185.246.128.xxxSESweden491118 Sept, 08:55
179.43.133.xxxCHSwitzerland308118 Sept, 09:01
179.43.139.xxxCHSwitzerland198218 Sept, 09:11
176.53.159.xxxTRTurkey133218 Sept, 10:46
103.149.197.xxxINIndia97705 Aug, 06:10
109.160.32.xxxUSUnited States41512 Sept, 08:10
27.71.230.xxxVNVietnam30403 Aug, 18:50
91.92.42.xxxNLNetherlands29728 Aug, 18:50
โšก Recent activity
10:46TR176.53.159.xxxTurkey
10:03CO129.222.203.xxxColombia
10:03CO129.222.203.xxxColombia
10:03CO129.222.203.xxxColombia
09:17BE35.205.96.xxxBelgium
09:11CH179.43.139.xxxSwitzerlandReverse tunnel
09:11CH179.43.139.xxxSwitzerlandReverse tunnel
09:11CH179.43.139.xxxSwitzerland
09:01CH179.43.133.xxxSwitzerlandReverse tunnel
09:01CH179.43.133.xxxSwitzerlandReverse tunnel
09:01CH179.43.133.xxxSwitzerland
08:55SE185.246.128.xxxSwedenReverse tunnel

This is the real material you train with

Every scenario on the platform is inspired by attacks like these. Create your free account and practice incident response on real data.

Start training โ†’