Incident Operations Dashboard
real data only • live honeypots, VPS nodes, sessions, commands, and DB health
Postgres
—
Last ingest
—
Last DB write
—
Tail seq
—
Active nodes
—
Real nodes
only nodes actually seen in honeypot telemetry
—
Top attackers
selected node / all nodes
—
IP Count Last seen
Top commands
what attackers are actually typing
—
Command Count
Latest ban actions
auto-ban and manual ban/unban events from the persistent buffer
—
Time Action Reason IP Details
Live event feed
latest SSH/HTTP events in the selected window
—
Time Node Type Source Details