violet's honeypot
DashboardAnalysis
threat analysis · ml

Attack Intelligence

What the traffic reveals: who the attackers are, what they want, and where it's heading.

12
botnet campaigns
100%
intent model accuracy
296
anomalous actors
2462
ips profiled
password length distribution
no data
password makeup
no data yet
most-tried user : password
no data yet
attacker networks (asn)
no data yet
attacks by hour (utc) · day of week
Sun
Mon
Tue
Wed
Thu
Fri
Sat
0
6
12
18
attack volume · hourly, with 24h forecast
attacker intent (from captured commands)
01persistence
1563
02recon
252
03other
159
04miner
142
05malware_install
92
botnet campaigns (clustered)
#02298 ip🇨🇳345gs5662d34 : 345gs5662d3447.5/ip
models: dbscan clustering · tf-idf + random forest intent · isolationforest anomalies · seasonal forecast
now
#1
76 ip
🇨🇳
root : 123@@@
1.1/ip
#619 ip🇳🇱root : 1234401.1/ip
#212 ip🇰🇷root : LeitboGi0ro3.2/ip
#34 ip🇺🇸openclaw : 11430/ip
#54 ip🇺🇸.syslogs : Pa3384526w0rd1001/ip
#104 ip🇳🇱root : kali1469.2/ip
#113 ip🇫🇷Admin : 123451460/ip
#42 ip🇺🇸root1 : root11598.5/ip
#72 ip🇩🇪root : gVgaB=gr4hc7nsC-va7t1498.5/ip
#82 ip🇳🇱root : 4/ip
#92 ip🇳🇱firedancer : firedancer394/ip