Skip to content
Deception network · Public telemetry

HONEYPOT
NETWORK.WATCHING THE WATCHERS.

VEXTRACE operates a network of intentionally exposed decoy services to study real-world attacker behavior — tooling, timing, geography and technique. This page shows a live-illustrated view of that traffic. Full session data, commands and raw indicators are reviewed privately by our intelligence team.

This public view renders a continuously-generated, representative simulation of honeypot telemetry patterns — source addresses are drawn from IP ranges reserved for documentation (RFC 5737) and can never identify a real host. It illustrates the shape of real attacker activity without exposing raw victim/attacker data publicly.
0Attacks observed today
0Source countries
10Active decoy services
—Most targeted service
01

Live attack origins

Every arc represents an inbound connection attempt against a decoy service, drawn as it happens. Convergence point is illustrative of VEXTRACE's monitored infrastructure.

02

Live event feed

Most recent inbound events across the decoy network.

TimeCountrySourceServiceTypeSeverity
03

Exposed decoy services

Intentionally vulnerable services deployed across the network to attract and study real attacker tooling.

Top source countries · rolling session
Attack type distribution · rolling session

Curious how deception technology fits your environment?

We design, deploy and monitor bespoke honeypot and canary-token networks tailored to an organization's real attack surface — turning nuisance traffic into early-warning intelligence.

Talk to us