Venus operates a global network of honeypot sensors and turns the raw flood of probes, scans and exploit attempts into structured, research-grade threat intelligence. This public view is fully aggregated and redacted — the detailed corpus is available to vetted researchers.
6650 actors engaged over the last 30 days; 5% escalated beyond initial reconnaissance. 7 of 8 tracked ATT&CK techniques actively observed this period — Cloud / OS Default Users sustained the highest source diversity over the period.
Counts only. Every figure is an aggregate across the sensor network and carries no attribution to any individual host.
Geographic origin reflects the network egress point, not necessarily the operator. Hosting and datacenter networks dominate.
| Network / ASN | Type | Actors | Events |
|---|---|---|---|
| Microsoft Corporation | Hosting/DC | 371 | 31.4k |
| Techoff Srv Limited | Hosting/DC | 34 | 26.6k |
| Unmanaged Ltd | Hosting/DC | 23 | 11.1k |
| Play2go International Limited | Unknown | 5 | 8.4k |
| Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 57 | 8.1k |
| Google LLC | Hosting/DC | 229 | 5.9k |
| Amazon.com, Inc. | Hosting/DC | 61 | 5.5k |
| DigitalOcean, LLC | Hosting/DC | 224 | 5.1k |
| UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | Unknown | 75 | 4.1k |
| Tencent Building, Kejizhongyi Avenue | Unknown | 24 | 3.7k |
| OVH SAS | Hosting/DC | 36 | 3.7k |
| DIGI VPS | Hosting/DC | 2 | 3.5k |
| Reliance Communications Ltd.DAKC MUMBAI | ISP/Residential | 1 | 3.4k |
| Feo Prest SRL | Unknown | 7 | 3.2k |
| Limited Network LTD | Unknown | 18 | 3.1k |
Volume by attack category this week against the previous week. Trend lines show the last 14 days.
| Category | 14-day trend | This week | vs last week |
|---|---|---|---|
| Path traversal | 32 | ▲ 33.3% | |
| RCE attempt | 44 | ▲ 15.8% | |
| SQL injection | 11 | → 0.0% | |
| Webshell upload | 15,618 | ▼ 1.0% | |
| Credential stuffing | 25,752 | ▼ 3.3% | |
| Scanner / recon | 54,356 | ▼ 11.7% |
Campaign event volume over the last 30 days. Each line represents one threat actor family targeting the sensor network.
Gold = actively observed this period.
A live sample with source addresses masked to /16 and exact payloads withheld — category only.
The gated Venus console exposes per-actor profiles, session replays, pattern corpora and downloadable evidence bundles. Access is vetted and every action is logged.