Know who's knocking before you open the door.
Instant IP threat intelligence from 73 honeypots and 22+ threat feeds.
Your public IP is 216.73.216.170. Press Lookup for an instant threat-intelligence report — geolocation, ISP, blacklist presence, Tor / proxy / hosting flags, and a threat score.
Or try one of these:
73 honeypots 22+ threat feeds 101,296,332 IPs analysed refreshed every 4 hours
Independently operated · Methodology public · No data resale · Supported by UK Cyber Defence Ltd
Live threat intelligence — what the platform is currently watching
The numbers below are not marketing copy. They are the live counters from a network of 73 honeypots, tarpits and deception devices, cross-referenced against major blocklists and threat-intelligence feeds.
Recent malicious IPs
Live · connectingBrand-new attackers picked up by the sensor estate in the last 60 minutes, in priority order. Country, category and threat score for each address; the page updates visibly without a reload.
| IP | Country | Category | Threat | First seen | Last seen |
|---|---|---|---|---|---|
| 34.101.218.216 | Indonesia | Network Attack | 100 | ||
| 64.205.72.221 | United States | malicious | 100 | ||
| 170.247.59.245 | Argentina | Network Attack | 100 | ||
| 103.184.95.41 | Bangladesh | Network Attack | 100 | ||
| 54.183.247.138 | United States | Network Attack | 100 | ||
| 170.168.30.202 | The Netherlands | Network Attack | 100 | ||
| 176.131.12.147 | France | Network Attack | 100 | ||
| 202.47.44.49 | Pakistan | Network Attack | 100 | ||
| 191.54.136.23 | Brazil | Network Attack | 100 | ||
| 41.62.155.222 | Tunisia | Network Attack | 100 | ||
| 156.255.154.124 | Venezuela | Network Attack | 100 | ||
| 44.250.153.228 | United States | Network Attack | 100 | ||
| 99.97.160.37 | United States | Network Attack | 100 | ||
| 216.244.52.59 | Japan | Network Attack | 100 | ||
| 188.233.76.156 | Russia | Network Attack | 100 | ||
| 191.177.186.132 | Brazil | Network Attack | 100 | ||
| 181.47.20.97 | Argentina | Network Attack | 100 | ||
| 34.156.22.151 | Belgium | malicious | 100 | ||
| 130.49.79.66 | The Netherlands | Network Attack | 100 | ||
| 61.255.213.208 | South Korea | Network Attack | 100 |
When attackers are most active right now
AI Agent Traffic (Last 24 Hours)
methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed.
Methodology
Where attacks are coming from right now
What attackers are trying to do this week
Country league table — every country hosting malicious activity right now
Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.
| # | Country | Dominant category | Blacklisted IPs ▼ | Risk | Most recent listing |
|---|---|---|---|---|---|
| 1 | United States (US) | Network Attack | 105,682 | Critical | |
| 2 | Poland (PL) | Network Attack | 100,877 | Critical | |
| 3 | China (CN) | Network Attack | 64,953 | Critical | |
| 4 | Türkiye (TR) | Network Attack | 50,281 | Critical | |
| 5 | Brazil (BR) | Network Attack | 30,959 | Critical | |
| 6 | Vietnam (VN) | Network Attack | 20,524 | Critical | |
| 7 | Russia (RU) | Network Attack | 19,384 | Critical | |
| 8 | Germany (DE) | Network Attack | 16,221 | Critical | |
| 9 | United Kingdom (GB) | malicious | 11,635 | Critical | |
| 10 | India (IN) | Network Attack | 10,770 | Critical | |
| 11 | France (FR) | Network Attack | 9,964 | Critical | |
| 12 | The Netherlands (NL) | Network Attack | 9,249 | Critical | |
| 13 | Ukraine (UA) | Network Attack | 8,423 | Critical | |
| 14 | Belgium (BE) | Network Attack | 8,365 | Critical | |
| 15 | Hong Kong (HK) | Network Attack | 7,454 | Critical | |
| 16 | Japan (JP) | Network Attack | 6,949 | Critical | |
| 17 | Singapore (SG) | malicious | 6,553 | Critical | |
| 18 | Argentina (AR) | Network Attack | 6,125 | Critical | |
| 19 | Indonesia (ID) | Network Attack | 5,454 | Critical | |
| 20 | Pakistan (PK) | Network Attack | 5,287 | Critical | |
| 21 | Bangladesh (BD) | Network Attack | 5,185 | Critical | |
| 22 | South Korea (KR) | malicious | 5,168 | Critical | |
| 23 | Canada (CA) | Network Attack | 5,088 | Critical | |
| 24 | Mexico (MX) | Network Attack | 4,551 | High | |
| 25 | Seychelles (SC) | Network Attack | 4,414 | High | |
| 26 | Italy (IT) | Network Attack | 3,588 | High | |
| 27 | Taiwan (TW) | Network Attack | 3,503 | High | |
| 28 | Spain (ES) | Network Attack | 3,491 | High | |
| 29 | Thailand (TH) | Network Attack | 3,186 | High | |
| 30 | Finland (FI) | Network Attack | 2,914 | High | |
| 31 | Sweden (SE) | malicious | 2,407 | High | |
| 32 | Israel (IL) | Network Attack | 2,315 | High | |
| 33 | Iran (IR) | Network Attack | 2,223 | High | |
| 34 | Colombia (CO) | Network Attack | 2,105 | High | |
| 35 | South Africa (ZA) | Network Attack | 1,995 | High | |
| 36 | Malaysia (MY) | malicious | 1,893 | High | |
| 37 | Australia (AU) | Network Attack | 1,842 | High | |
| 38 | United Arab Emirates (AE) | Network Attack | 1,827 | High | |
| 39 | Switzerland (CH) | Network Attack | 1,708 | High | |
| 40 | Bulgaria (BG) | malicious | 1,633 | High | |
| 41 | Ireland (IE) | Network Attack | 1,627 | High | |
| 42 | Uzbekistan (UZ) | malicious | 1,570 | High | |
| 43 | Philippines (PH) | Network Attack | 1,566 | High | |
| 44 | Chile (CL) | Network Attack | 1,562 | High | |
| 45 | Saudi Arabia (SA) | Network Attack | 1,311 | High | |
| 46 | Romania (RO) | malicious | 1,095 | High | |
| 47 | Morocco (MA) | Network Attack | 971 | High | |
| 48 | Portugal (PT) | malicious | 934 | High | |
| 49 | Venezuela (VE) | Network Attack | 929 | High | |
| 50 | Egypt (EG) | Network Attack | 920 | High | |
| 51 | Ecuador (EC) | Network Attack | 901 | High | |
| 52 | Republic of Lithuania (LT) | malicious | 872 | High | |
| 53 | Czechia (CZ) | Network Attack | 848 | High | |
| 54 | Kenya (KE) | Network Attack | 677 | High | |
| 55 | Croatia (HR) | Network Attack | 676 | High | |
| 56 | Kazakhstan (KZ) | Network Attack | 633 | Medium | |
| 57 | Iraq (IQ) | malicious | 603 | Medium | |
| 58 | Austria (AT) | malicious | 574 | Medium | |
| 59 | Republic of Moldova (MD) | malicious | 545 | Medium | |
| 60 | Norway (NO) | Network Attack | 527 | Medium | |
| 61 | Uruguay (UY) | Network Attack | 502 | Medium | |
| 62 | Peru (PE) | Network Attack | 478 | Medium | |
| 63 | Nigeria (NG) | Network Attack | 455 | Medium | |
| 64 | Tunisia (TN) | Network Attack | 450 | Medium | |
| 65 | Denmark (DK) | Network Attack | 448 | Medium | |
| 66 | Estonia (EE) | Network Attack | 417 | Medium | |
| 67 | Cyprus (CY) | Network Attack | 410 | Medium | |
| 68 | Algeria (DZ) | Network Attack | 407 | Medium | |
| 69 | Slovenia (SI) | Network Attack | 400 | Medium | |
| 70 | Azerbaijan (AZ) | Network Attack | 389 | Medium | |
| 71 | Greece (GR) | Network Attack | 376 | Medium | |
| 72 | Hungary (HU) | malicious | 374 | Medium | |
| 73 | Nepal (NP) | Network Attack | 365 | Medium | |
| 74 | Georgia (GE) | Network Attack | 361 | Medium | |
| 75 | Latvia (LV) | malicious | 358 | Medium | |
| 76 | Myanmar (MM) | Network Attack | 346 | Medium | |
| 77 | Bolivia (BO) | Network Attack | 328 | Medium | |
| 78 | Mauritius (MU) | Network Attack | 328 | Medium | |
| 79 | Armenia (AM) | Network Attack | 324 | Medium | |
| 80 | Qatar (QA) | Network Attack | 316 | Medium | |
| 81 | Dominican Republic (DO) | Network Attack | 311 | Medium | |
| 82 | Turkmenistan (TM) | malicious | 285 | Medium | |
| 83 | New Zealand (NZ) | Network Attack | 264 | Medium | |
| 84 | Serbia (RS) | Network Attack | 254 | Medium | |
| 85 | Panama (PA) | malicious | 244 | Medium | |
| 86 | Paraguay (PY) | Network Attack | 243 | Medium | |
| 87 | Belarus (BY) | Network Attack | 241 | Medium | |
| 88 | Albania (AL) | Network Attack | 236 | Medium | |
| 89 | Cambodia (KH) | Network Attack | 225 | Medium | |
| 90 | Sri Lanka (LK) | Network Attack | 217 | Medium | |
| 91 | Senegal (SN) | Network Attack | 213 | Medium | |
| 92 | Palestine (PS) | Network Attack | 205 | Medium | |
| 93 | Costa Rica (CR) | Network Attack | 202 | Medium | |
| 94 | Oman (OM) | Network Attack | 194 | Medium | |
| 95 | Jordan (JO) | Network Attack | 191 | Medium | |
| 96 | British Virgin Islands (VG) | malicious | 183 | Medium | |
| 97 | Tanzania (TZ) | Network Attack | 179 | Medium | |
| 98 | Ethiopia (ET) | Network Attack | 170 | Medium | |
| 99 | Ghana (GH) | malicious | 157 | Medium | |
| 100 | Slovakia (SK) | Network Attack | 154 | Medium | |
| 101 | Bosnia and Herzegovina (BA) | Network Attack | 152 | Medium | |
| 102 | Kuwait (KW) | Network Attack | 152 | Medium | |
| 103 | Bahrain (BH) | Network Attack | 149 | Medium | |
| 104 | Ivory Coast (CI) | Network Attack | 146 | Medium | |
| 105 | Iceland (IS) | malicious | 132 | Medium | |
| 106 | North Macedonia (MK) | Network Attack | 132 | Medium | |
| 107 | Puerto Rico (PR) | Network Attack | 124 | Medium | |
| 108 | Belize (BZ) | Network Attack | 122 | Medium | |
| 109 | Luxembourg (LU) | malicious | 122 | Medium | |
| 110 | Honduras (HN) | Network Attack | 116 | Low | |
| 111 | Mongolia (MN) | Network Attack | 114 | Low | |
| 112 | Lebanon (LB) | Network Attack | 111 | Low | |
| 113 | Guatemala (GT) | Network Attack | 108 | Low | |
| 114 | Burkina Faso (BF) | Network Attack | 100 | Low | |
| 115 | Uganda (UG) | malicious | 100 | Low | |
| 116 | Kyrgyzstan (KG) | Network Attack | 93 | Low | |
| 117 | Botswana (BW) | malicious | 87 | Low | |
| 118 | Angola (AO) | Network Attack | 85 | Low | |
| 119 | Togo (TG) | Network Attack | 83 | Low | |
| 120 | Trinidad and Tobago (TT) | Network Attack | 82 | Low | |
| 121 | Cameroon (CM) | malicious | 79 | Low | |
| 122 | Mozambique (MZ) | Network Attack | 78 | Low | |
| 123 | Jamaica (JM) | Network Attack | 76 | Low | |
| 124 | Malta (MT) | Network Attack | 73 | Low | |
| 125 | Macao (MO) | Network Attack | 70 | Low | |
| 126 | Syria (SY) | Network Attack | 67 | Low | |
| 127 | Laos (LA) | Network Attack | 66 | Low | |
| 128 | Libya (LY) | Network Attack | 64 | Low | |
| 129 | Kosovo (XK) | Network Attack | 60 | Low | |
| 130 | Congo Republic (CG) | Network Attack | 57 | Low | |
| 131 | Zimbabwe (ZW) | Network Attack | 55 | Low | |
| 132 | El Salvador (SV) | Network Attack | 54 | Low | |
| 133 | Liberia (LR) | Network Attack | 53 | Low | |
| 134 | Mali (ML) | Network Attack | 49 | Low | |
| 135 | Réunion (RE) | Network Attack | 47 | Low | |
| 136 | Tajikistan (TJ) | malicious | 46 | Low | |
| 137 | Maldives (MV) | Network Attack | 44 | Low | |
| 138 | Zambia (ZM) | Network Attack | 44 | Low | |
| 139 | Benin (BJ) | malicious | 41 | Low | |
| 140 | Rwanda (RW) | Network Attack | 40 | Low | |
| 141 | Gabon (GA) | Network Attack | 39 | Low | |
| 142 | Barbados (BB) | Network Attack | 37 | Low | |
| 143 | Namibia (NA) | Network Attack | 33 | Low | |
| 144 | Nicaragua (NI) | malicious | 33 | Low | |
| 145 | Guadeloupe (GP) | Network Attack | 32 | Low | |
| 146 | Montenegro (ME) | malicious | 31 | Low | |
| 147 | Yemen (YE) | Network Attack | 31 | Low | |
| 148 | Afghanistan (AF) | malicious | 28 | Low | |
| 149 | Guam (GU) | Network Attack | 26 | Low | |
| 150 | Monaco (MC) | malicious | 26 | Low | |
| 151 | Congo (DRC) (CD) | Network Attack | 25 | Low | |
| 152 | Madagascar (MG) | Network Attack | 25 | Low | |
| 153 | Martinique (MQ) | Network Attack | 25 | Low | |
| 154 | Cabo Verde (CV) | Network Attack | 23 | Low | |
| 155 | Fiji (FJ) | Network Attack | 22 | Low | |
| 156 | French Guiana (GF) | Network Attack | 20 | Low | |
| 157 | Guyana (GY) | Network Attack | 20 | Low | |
| 158 | Malawi (MW) | Network Attack | 20 | Low | |
| 159 | Bhutan (BT) | Network Attack | 19 | Low | |
| 160 | Curaçao (CW) | Network Attack | 19 | Low | |
| 161 | Timor-Leste (TL) | Network Attack | 19 | Low | |
| 162 | Bahamas (BS) | Network Attack | 17 | Low | |
| 163 | Djibouti (DJ) | Network Attack | 16 | Low | |
| 164 | New Caledonia (NC) | Network Attack | 16 | Low | |
| 165 | Andorra (AD) | Network Attack | 15 | Low | |
| 166 | Gambia (GM) | Network Attack | 15 | Low | |
| 167 | Cayman Islands (KY) | Network Attack | 15 | Low | |
| 168 | Liechtenstein (LI) | tor_exit | 15 | Low | |
| 169 | Brunei (BN) | Network Attack | 14 | Low | |
| 170 | French Polynesia (PF) | Network Attack | 14 | Low | |
| 171 | Sint Maarten (SX) | Network Attack | 14 | Low | |
| 172 | Lesotho (LS) | Network Attack | 12 | Low | |
| 173 | Mauritania (MR) | Network Attack | 12 | Low | |
| 174 | Suriname (SR) | Network Attack | 12 | Low | |
| 175 | Haiti (HT) | Network Attack | 11 | Low | |
| 176 | Eritrea (ER) | Network Attack | 10 | Low | |
| 177 | Sudan (SD) | malicious | 10 | Low | |
| 178 | Somalia (SO) | malicious | 9 | Low | |
| 179 | Burundi (BI) | Network Attack | 8 | Low | |
| 180 | Cuba (CU) | malicious | 8 | Low | |
| 181 | Eswatini (SZ) | malicious | 8 | Low | |
| 182 | Grenada (GD) | Network Attack | 7 | Low | |
| 183 | Isle of Man (IM) | malicious | 7 | Low | |
| 184 | Antigua and Barbuda (AG) | Network Attack | 6 | Low | |
| 185 | Niger (NE) | Network Attack | 6 | Low | |
| 186 | Vanuatu (VU) | Network Attack | 6 | Low | |
| 187 | Papua New Guinea (PG) | Network Attack | 5 | Low | |
| 188 | U.S. Virgin Islands (VI) | malicious | 5 | Low | |
| 189 | Dominica (DM) | malicious | 4 | Low | |
| 190 | Guernsey (GG) | Network Attack | 4 | Low | |
| 191 | Jersey (JE) | malicious | 4 | Low | |
| 192 | American Samoa (AS) | Network Attack | 3 | Low | |
| 193 | Faroe Islands (FO) | malicious | 3 | Low | |
| 194 | Sierra Leone (SL) | Network Attack | 3 | Low | |
| 195 | Chad (TD) | malicious | 3 | Low | |
| 196 | Mayotte (YT) | Network Attack | 3 | Low | |
| 197 | Anguilla (AI) | Network Attack | 2 | Low | |
| 198 | Aruba (AW) | Network Attack | 2 | Low | |
| 199 | Åland Islands (AX) | malicious | 2 | Low | |
| 200 | Bermuda (BM) | Network Attack | 2 | Low | |
| 201 | Bonaire, Sint Eustatius and Saba (BQ) | malicious | 2 | Low | |
| 202 | Greenland (GL) | Network Attack | 2 | Low | |
| 203 | Equatorial Guinea (GQ) | Network Attack | 2 | Low | |
| 204 | Kiribati (KI) | Network Attack | 2 | Low | |
| 205 | Comoros (KM) | malicious | 2 | Low | |
| 206 | Saint Kitts and Nevis (KN) | Network Attack | 2 | Low | |
| 207 | Saint Lucia (LC) | Network Attack | 2 | Low | |
| 208 | Saint Pierre and Miquelon (PM) | Network Attack | 2 | Low | |
| 209 | South Sudan (SS) | Network Attack | 2 | Low | |
| 210 | Guinea (GN) | Network Attack | 1 | Low | |
| 211 | Saint Martin (MF) | Network Attack | 1 | Low | |
| 212 | Marshall Islands (MH) | Network Attack | 1 | Low | |
| 213 | Solomon Islands (SB) | Network Attack | 1 | Low | |
| 214 | San Marino (SM) | Network Attack | 1 | Low | |
| 215 | Turks and Caicos Islands (TC) | Network Attack | 1 | Low | |
| 216 | Saint Vincent and the Grenadines (VC) | Network Attack | 1 | Low | |
| 217 | Samoa (WS) | Network Attack | 1 | Low |
No countries match the current filters.
Integrates with
How we measure threats
Every score on the platform is rooted in a public methodology: 73 honeypots and tarpits across multiple regions, cross-referenced with 22+ open-source feeds and refreshed every four hours. We publish the signals, the cadence and the caveats so you can replicate our maths.
Brute-force activity — this week vs. last week
74,942 unique attackers
in the last 7 days
(vs. 38,452 the week before)
+94.9%
week-over-week change
ASN & ISP league table — top 20 networks hosting malicious activity
Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.
| # | ASN | Network / ISP | Malicious IPs | Risk score |
|---|---|---|---|---|
| 1 | AS200373 | DREI-K-TECH-GMBH, DE | 28,787 | 97 critical |
| 2 | AS4837 | CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN | 23,142 | 29 medium |
| 3 | AS4134 | No.31,Jin-rong Street | 20,645 | 19 low |
| 4 | AS396982 | GOOGLE-CLOUD-PLATFORM, US | 14,002 | 43 medium |
| 5 | AS16509 | Amazon.com, Inc. | 10,867 | 32 medium |
| 6 | AS8075 | MICROSOFT-CORP-MSN-AS-BLOCK, US | 8,514 | 53 high |
| 7 | AS13335 | CLOUDFLARENET, US | 8,410 | 61 high |
| 8 | AS26548 | PUREVOLTAGE-INC, US | 7,387 | 87 critical |
| 9 | AS45102 | ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN | 6,887 | 36 medium |
| 10 | AS47329 | WDM-AS, PL | 6,883 | 100 critical |
| 11 | AS43420 | ELTRONIK-AS, PL | 5,668 | 100 critical |
| 12 | AS41931 | EURONET-AS, PL | 5,356 | 100 critical |
| 13 | AS50467 | BESKID-MEDIA-AS, PL | 5,253 | 100 critical |
| 14 | AS50188 | KOLNET Sp. z o.o. | 5,205 | 100 critical |
| 15 | AS198401 | GECKONET-AS, PL | 5,195 | 100 critical |
| 16 | AS33923 | ART-COM, PL | 4,929 | 100 critical |
| 17 | AS135905 | VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN | 4,830 | 96 critical |
| 18 | AS14618 | Amazon.com, Inc. | 4,663 | 41 medium |
| 19 | AS6823 | TR-3C1B-TELEKOM, TR | 4,468 | 100 critical |
| 20 | AS42910 | PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR | 3,726 | 100 critical |
Weekly digest — by email
A short Monday-morning email summarising the headline movements: brute-force trend, the ASN league table, the noisiest categories, and the IPs propagating fastest across the sensor estate. Opt in, unsubscribe with one click.
Embeddable badge
Drop this badge into your blog or status page — it always shows the live count: