Research view Findings describe recurring technical behaviour observed by the honeypot. Similar indicators do not prove that the activity belongs to the same person or organisation.

What attackers are repeatedly doing

Repeated sessions condensed into behavioural findings, infrastructure patterns and supporting evidence.

Not updated yet

Total sessions observed —

Sessions grouped into patterns —

Confirmed patterns —

Emerging patterns —

Select a finding to inspect its behaviour, infrastructure and technical evidence.