Threat intelligence reports, platform updates, and security research.
Five IPs drove 48.9% of the 5.08M attacks on our honeypot network in June 2026: an RDP operator that stopped rotating, and record Jenkins and Docker scanning.
Analysis of 9.25M+ attacks captured across 18 protocols by the threat.gg honeypot network during May 2026: a record-breaking month bookended by two mega-campaigns — a telnet flood that front-loaded 64% of its volume into the first three days, and a five-IP RDP campaign that fired 2.89M attempts in four days, escalating April's Polish-reseller operator nearly fivefold and singlehandedly making 'Israel' the #1 source country.
Analysis of 3.4M+ attacks captured across 18 protocols by the threat.gg honeypot network during April 2026: a single-day 884K telnet spike still riding 2016-era Mirai credentials, a coordinated 606K-attempt RDP campaign from three sequential Cogent IPs, and the rise of Go-based scanners overtaking libssh as the dominant SSH attack tooling.
Analysis of 1.5M+ attacks captured across 20 protocols by the threat.gg honeypot network during March 2026, including a massive RDP spike, CI/CD targeting trends, and IoT botnet fingerprints.
An analysis of common attack patterns observed across SSH, HTTP, and database honeypots deployed on the threat.gg platform.
Deploy honeypots in minutes, not months. threat.gg brings accessible threat intelligence to security teams of every size.