#Threat Intelligence

365,000 Attacks in Seven Days: What a TPOT Honeypot Sees on the Open Internet

One Azure VM, one week, 365,000 logged events. root/123456 at the top of the credential charts, SIP and SSH at the top of the port charts, and cloud providers doing most of the shooting.