Second Edge
About this site
Second Edge runs honeypots: decoy systems that look like ordinary internet-facing servers but exist only to be attacked. Every login attempt, port scan and web exploit they receive is logged, analysed in our SIEM platform and published here.
The data shows what automated attacks on the internet look like right now: which services are targeted, which usernames and passwords attackers try, and where the attacks come from.
What you'll find here
- Attack statistics: daily brute-force, port-scan and web attack counts for the last 7 days, and a list of the latest attacks.
- Attack map: which countries the attacks came from.
- Username and password insight: the credentials attackers try most often.
- Threat intelligence feeds: free, hourly-updated CSV lists of attacking IP addresses for your firewall or SIEM.
AbuseIPDB
Attacking IP addresses are reported to AbuseIPDB automatically, so other network owners can block them too.
