← All reports
Week of 2026-06-22
Weekly threat-intelligence report
Generated 6/29/2026 · BoarNet honeypot fleet
- events captured
- 200,000
- distinct IPs
- 990
- novel attackers
- 1,174
- samples collected
- 103
Narrative still generating — refresh in a few minutes.
Top edge-device targets
- 1fortinet5
- 2soho-router3
- 3cisco-asa1
Top probe families
- 1syn-only101,367
- 2unknown85,078
- 3rdp778
- 4mongodb250
- 5tls-on-nontls175
- 6http-on-nonstd155
- 7mssql112
- 8http38
- 9postgres23
- 10memcached21
Top ASNs
- 1AS14061 DIGITALOCEAN-ASN101,306
- 2AS27882 Telefonica Celular de Bolivia S.A.53,044
- 3AS35768 MSLINK-AS30,252
- 4AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd.7,180
- 5AS4134 CHINANET-BACKBONE No.31,Jin-rong Street1,316
- 6AS200730 ISAEV1,073
- 7AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa941
- 8AS396982 GOOGLE-CLOUD-PLATFORM768
- 9AS16509 AMAZON-02297
- 10AS49981 WORLDSTREAM278
Top countries
- 1US103,990
- 2BO53,046
- 3RU31,380
- 4SG5,914
- 5CN1,838
- 6ID1,031
- 7BE565
- 8NL431
- 9DE322
- 10ES296
Top CVEs cited in probes
- 1cve-2015-18805
- 2cve-2022-229471
- 3cve-2013-51221
Numbers are aggregate counts from BoarNet honeypot sensors during the week starting 2026-06-22. Per-IP detail and live DSL search are available to authenticated researchers in the dashboard.