BoarNet · Research

Weekly threat-intelligence reports

Every Monday we publish what the BoarNet sensor fleet caught the week prior — edge-device scanning trends, novel attacker IPs, dropper payloads, and probe-family breakdowns. Aggregate-only; per-IP detail lives in the dashboard for authenticated researchers.

  1. Week of 2026-04-27

    Week of 2026-04-27: SYN-only flood dominates at 96.3% of 200k events; infrastructure ASNs drive high-volume, low-IP density probing

    200.0k
    events captured
    1.0k
    distinct IPs
    2.6k
    novel attackers
    15
    samples collected
  2. Week of 2026-04-20

    Week of 2026-04-20: High-volume concentrated scanning from VPS infrastructure dominates quiet week

    52.1k
    events captured
    1.3k
    distinct IPs
    1.1k
    novel attackers
    0
    samples collected