Total events
—
Unique sources
—
Networks (ASNs)
—
SSRF attempts
—
MCP exfil tries
—
MCP RCE tries
—
Dev-surface RCE
—
Compute-theft
—
Ranked breakdowns. Source IPs are withheld by design — origins are shown by network and country.
How far they got
events by tier — most traffic is bare scanning; few reach RCE
Technique mix (hourly)
stacked by tier — escalation spikes vs the scan noise floor
recon
abuse
exfil
rce/ssrf