- A honeypot network of 15 SSH servers worldwide collected 1.5 million login attempts from 6,790 unique IPs over 30 days.
- Asia contributed the most unique IPs (60.1%), but Europe generated the highest login attempts (60.2%) largely due to the Netherlands.
- China, the US, and India were the top three source countries by unique IPs; the Netherlands alone accounted for 44.8% of total attempts.
- Top ASNs by attempts include TechTies Inc. (29.3%) and TECHOFF SRV LIMITED (10.2%), indicating concentrated attack infrastructure.