INFOThreat IntelligenceOct 6, 2026 · 16 min
365,000 Attacks in Seven Days: What a TPOT Honeypot Sees on the Open Internet
One Azure VM, one week, 365,000 logged events. root/123456 at the top of the credential charts, SIP and SSH at the top of the port charts, and cloud providers doing most of the shooting.