Know who's knocking before you open the door.

Instant IP threat intelligence from 73 honeypots and 22+ threat feeds.

Your public IP is 216.73.216.79. Press Lookup for an instant threat-intelligence report — geolocation, ISP, blacklist presence, Tor / proxy / hosting flags, and a threat score.

Or try one of these:
Google DNS 8.8.8.8 Known scanner 167.94.138.49 Tor exit node 185.220.101.1
Lookup an IP
Geolocation, ISP, blacklist presence and threat score for any IPv4 or IPv6 address.
Download a blocklist
Country, category and full malicious-IP feeds in plaintext, CSV and JSON.
Get an API key
Free REST API for IP enrichment and bulk lookups — OpenAPI 3.1, Swagger UI.

73 honeypots 22+ threat feeds 101,087,679 IPs analysed refreshed every 4 hours

Independently operated · Methodology public · No data resale · Supported by UK Cyber Defence Ltd

Live threat intelligence — what the platform is currently watching

The numbers below are not marketing copy. They are the live counters from a network of 73 honeypots, tarpits and deception devices, cross-referenced against major blocklists and threat-intelligence feeds.

5,156
Attackers, last 4 hours
654,708
Malicious IPs listed
220
Countries observed
2026-08-28 04:03Z
Last refresh (UTC)

Recent malicious IPs

Live · connecting

Brand-new attackers picked up by the sensor estate in the last 60 minutes, in priority order. Country, category and threat score for each address; the page updates visibly without a reload.

IP Country Category Threat First seen Last seen
179.40.69.235 Argentina malicious 100
114.243.99.87 China malicious 100
40.124.176.218 United States malicious 100
40.119.34.244 United States malicious 100
40.124.113.121 United States malicious 100
74.249.184.179 United States Network Attack 100
4.227.181.13 United States malicious 100
200.122.80.6 Argentina malicious 100
42.52.19.166 China Network Attack 100
82.7.5.250 United Kingdom malicious 100
177.10.75.44 Brazil Network Attack 100
118.106.203.228 Japan malicious 100
181.45.46.148 Argentina Network Attack 100
223.199.181.79 China Network Attack 100
172.104.229.235 Germany malicious 100
103.165.119.2 India Network Attack 100
60.10.158.238 China Network Attack 100
216.244.255.93 Argentina malicious 100
200.59.88.133 Argentina Network Attack 100
112.46.212.19 China Network Attack 100
When attackers are most active right now
AI Agent Traffic (Last 24 Hours) methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed. Methodology
Where attacks are coming from right now
What attackers are trying to do this week
Country league table — every country hosting malicious activity right now

Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.

# Country Dominant category Blacklisted IPs ▼ Risk Most recent listing
1 United States (US) malicious 86,389 Critical
2 China (CN) Network Attack 71,234 Critical
3 Poland (PL) Network Attack 56,656 Critical
4 Türkiye (TR) Network Attack 36,345 Critical
5 Brazil (BR) Network Attack 28,532 Critical
6 Vietnam (VN) Network Attack 17,082 Critical
7 Russia (RU) malicious 14,461 Critical
8 Germany (DE) malicious 12,473 Critical
9 India (IN) Network Attack 12,397 Critical
10 United Kingdom (GB) malicious 9,655 Critical
11 The Netherlands (NL) malicious 8,644 Critical
12 Belgium (BE) Network Attack 7,669 Critical
13 Hong Kong (HK) malicious 7,427 Critical
14 Singapore (SG) malicious 7,236 Critical
15 France (FR) malicious 6,902 Critical
16 Indonesia (ID) Network Attack 6,057 Critical
17 Ukraine (UA) Network Attack 5,889 Critical
18 South Korea (KR) malicious 5,536 Critical
19 Bangladesh (BD) Network Attack 5,455 Critical
20 Japan (JP) malicious 5,441 Critical
21 Pakistan (PK) Network Attack 5,237 Critical
22 Argentina (AR) Network Attack 4,812 Critical
23 Mexico (MX) Network Attack 4,706 Critical
24 Canada (CA) Network Attack 4,133 High
25 Taiwan (TW) Network Attack 3,603 High
26 Italy (IT) Network Attack 2,854 High
27 Thailand (TH) Network Attack 2,828 High
28 Spain (ES) Network Attack 2,562 High
29 Sweden (SE) malicious 2,559 High
30 Iran (IR) Network Attack 2,448 High
31 Colombia (CO) Network Attack 2,150 High
32 South Africa (ZA) Network Attack 2,143 High
33 Australia (AU) Network Attack 2,113 High
34 Malaysia (MY) malicious 2,037 High
35 Seychelles (SC) malicious 1,980 High
36 Ireland (IE) Network Attack 1,968 High
37 Switzerland (CH) Network Attack 1,774 High
38 Bulgaria (BG) malicious 1,590 High
39 Uzbekistan (UZ) malicious 1,368 High
40 Chile (CL) Network Attack 1,310 High
41 Philippines (PH) Network Attack 1,274 High
42 Saudi Arabia (SA) Network Attack 1,246 High
43 Romania (RO) malicious 1,192 High
44 United Arab Emirates (AE) Network Attack 1,186 High
45 Finland (FI) malicious 1,152 High
46 Egypt (EG) Network Attack 1,085 High
47 Israel (IL) Network Attack 1,079 High
48 Morocco (MA) Network Attack 953 High
49 Portugal (PT) malicious 938 High
50 Ecuador (EC) Network Attack 905 High
51 Venezuela (VE) Network Attack 832 High
52 Kenya (KE) Network Attack 764 High
53 Republic of Lithuania (LT) malicious 713 High
54 Croatia (HR) Network Attack 656 High
55 Kazakhstan (KZ) Network Attack 652 High
56 Uruguay (UY) Network Attack 639 Medium
57 Czechia (CZ) Network Attack 618 Medium
58 Republic of Moldova (MD) malicious 590 Medium
59 Iraq (IQ) malicious 587 Medium
60 Austria (AT) malicious 585 Medium
61 Nigeria (NG) Network Attack 582 Medium
62 Peru (PE) Network Attack 552 Medium
63 Norway (NO) Network Attack 551 Medium
64 Denmark (DK) Network Attack 494 Medium
65 Hungary (HU) malicious 441 Medium
66 Algeria (DZ) Network Attack 438 Medium
67 Greece (GR) Network Attack 421 Medium
68 Tanzania (TZ) Network Attack 392 Medium
69 Tunisia (TN) Network Attack 384 Medium
70 Azerbaijan (AZ) Network Attack 375 Medium
71 Dominican Republic (DO) Network Attack 370 Medium
72 Georgia (GE) Network Attack 361 Medium
73 Mauritius (MU) Network Attack 358 Medium
74 Nepal (NP) Network Attack 355 Medium
75 Slovenia (SI) Network Attack 355 Medium
76 Latvia (LV) malicious 345 Medium
77 Cambodia (KH) Network Attack 302 Medium
78 Bolivia (BO) Network Attack 300 Medium
79 Armenia (AM) Network Attack 293 Medium
80 Turkmenistan (TM) malicious 285 Medium
81 New Zealand (NZ) Network Attack 272 Medium
82 Myanmar (MM) Network Attack 270 Medium
83 Sri Lanka (LK) Network Attack 266 Medium
84 Serbia (RS) Network Attack 258 Medium
85 Qatar (QA) Network Attack 256 Medium
86 Senegal (SN) Network Attack 250 Medium
87 Panama (PA) Network Attack 229 Medium
88 Albania (AL) Network Attack 226 Medium
89 Palestine (PS) Network Attack 221 Medium
90 Paraguay (PY) Network Attack 220 Medium
91 Costa Rica (CR) Network Attack 210 Medium
92 Belarus (BY) Network Attack 209 Medium
93 Jordan (JO) Network Attack 209 Medium
94 Ethiopia (ET) Network Attack 208 Medium
95 British Virgin Islands (VG) malicious 192 Medium
96 Oman (OM) Network Attack 190 Medium
97 Ghana (GH) malicious 188 Medium
98 Estonia (EE) malicious 179 Medium
99 Mongolia (MN) Network Attack 177 Medium
100 Cyprus (CY) Network Attack 170 Medium
101 Luxembourg (LU) Network Attack 168 Medium
102 Slovakia (SK) malicious 160 Medium
103 Bahrain (BH) Network Attack 158 Medium
104 North Macedonia (MK) Network Attack 158 Medium
105 Honduras (HN) Network Attack 156 Medium
106 Kuwait (KW) Network Attack 154 Medium
107 Ivory Coast (CI) Network Attack 139 Medium
108 Syria (SY) Network Attack 135 Medium
109 Iceland (IS) malicious 134 Medium
110 Guatemala (GT) Network Attack 126 Low
111 Puerto Rico (PR) Network Attack 114 Low
112 Uganda (UG) malicious 111 Low
113 Bosnia and Herzegovina (BA) malicious 108 Low
114 Burkina Faso (BF) Network Attack 106 Low
115 Botswana (BW) malicious 101 Low
116 Lebanon (LB) Network Attack 96 Low
117 Trinidad and Tobago (TT) Network Attack 95 Low
118 Laos (LA) Network Attack 94 Low
119 Angola (AO) Network Attack 91 Low
120 Kyrgyzstan (KG) Network Attack 89 Low
121 Macao (MO) Network Attack 86 Low
122 Belize (BZ) Network Attack 82 Low
123 Mozambique (MZ) Network Attack 81 Low
124 Jamaica (JM) Network Attack 77 Low
125 Cameroon (CM) malicious 76 Low
126 Togo (TG) Network Attack 69 Low
127 El Salvador (SV) Network Attack 67 Low
128 Zambia (ZM) Network Attack 66 Low
129 Malta (MT) Network Attack 61 Low
130 Kosovo (XK) Network Attack 61 Low
131 Libya (LY) malicious 60 Low
132 Zimbabwe (ZW) Network Attack 59 Low
133 Congo Republic (CG) Network Attack 55 Low
134 Rwanda (RW) Network Attack 51 Low
135 Mali (ML) Network Attack 49 Low
136 Maldives (MV) Network Attack 49 Low
137 Namibia (NA) Network Attack 45 Low
138 Tajikistan (TJ) Network Attack 42 Low
139 Nicaragua (NI) Network Attack 41 Low
140 Réunion (RE) Network Attack 38 Low
141 Benin (BJ) malicious 36 Low
142 Afghanistan (AF) malicious 33 Low
143 Gabon (GA) Network Attack 33 Low
144 Liberia (LR) Network Attack 32 Low
145 Yemen (YE) malicious 32 Low
146 Barbados (BB) Network Attack 31 Low
147 Guadeloupe (GP) Network Attack 31 Low
148 Madagascar (MG) Network Attack 29 Low
149 Brunei (BN) malicious 28 Low
150 Montenegro (ME) malicious 28 Low
151 Monaco (MC) malicious 27 Low
152 Congo (DRC) (CD) Network Attack 26 Low
153 Bhutan (BT) malicious 24 Low
154 Guam (GU) Network Attack 24 Low
155 Fiji (FJ) Network Attack 23 Low
156 Martinique (MQ) Network Attack 22 Low
157 Andorra (AD) Network Attack 21 Low
158 Gambia (GM) Network Attack 21 Low
159 New Caledonia (NC) Network Attack 20 Low
160 Guyana (GY) Network Attack 19 Low
161 Haiti (HT) Network Attack 19 Low
162 Liechtenstein (LI) tor_exit 18 Low
163 Suriname (SR) Network Attack 17 Low
164 Djibouti (DJ) Network Attack 16 Low
165 French Polynesia (PF) Network Attack 16 Low
166 Sint Maarten (SX) Network Attack 16 Low
167 Lesotho (LS) Network Attack 15 Low
168 Cabo Verde (CV) Network Attack 14 Low
169 Cayman Islands (KY) Network Attack 14 Low
170 Malawi (MW) malicious 14 Low
171 Somalia (SO) malicious 14 Low
172 Curaçao (CW) Network Attack 13 Low
173 French Guiana (GF) Network Attack 13 Low
174 Bahamas (BS) Network Attack 11 Low
175 Mauritania (MR) malicious 11 Low
176 Isle of Man (IM) malicious 9 Low
177 Grenada (GD) Network Attack 8 Low
178 Sudan (SD) malicious 8 Low
179 Eritrea (ER) malicious 7 Low
180 Niger (NE) Network Attack 7 Low
181 Papua New Guinea (PG) Network Attack 7 Low
182 Antigua and Barbuda (AG) malicious 6 Low
183 American Samoa (AS) Network Attack 5 Low
184 Burundi (BI) malicious 5 Low
185 Eswatini (SZ) malicious 5 Low
186 Timor-Leste (TL) Network Attack 5 Low
187 U.S. Virgin Islands (VI) Network Attack 5 Low
188 Mayotte (YT) Network Attack 5 Low
189 Dominica (DM) malicious 4 Low
190 Guernsey (GG) Network Attack 4 Low
191 Jersey (JE) Network Attack 4 Low
192 Solomon Islands (SB) Network Attack 4 Low
193 Chad (TD) Network Attack 4 Low
194 Vanuatu (VU) Network Attack 4 Low
195 Greenland (GL) Network Attack 3 Low
196 Guinea (GN) Network Attack 3 Low
197 Equatorial Guinea (GQ) Network Attack 3 Low
198 Comoros (KM) Network Attack 3 Low
199 Sierra Leone (SL) Network Attack 3 Low
200 South Sudan (SS) Network Attack 3 Low
201 Aruba (AW) Network Attack 2 Low
202 Åland Islands (AX) malicious 2 Low
203 Bermuda (BM) Network Attack 2 Low
204 Cuba (CU) Network Attack 2 Low
205 Faroe Islands (FO) malicious 2 Low
206 Kiribati (KI) Network Attack 2 Low
207 Saint Kitts and Nevis (KN) Network Attack 2 Low
208 Tonga (TO) Network Attack 2 Low
209 Saint Vincent and the Grenadines (VC) Network Attack 2 Low
210 Samoa (WS) malicious 2 Low
211 Anguilla (AI) Network Attack 1 Low
212 Bonaire, Sint Eustatius and Saba (BQ) malicious 1 Low
213 Central African Republic (CF) Network Attack 1 Low
214 Gibraltar (GI) Network Attack 1 Low
215 Saint Lucia (LC) Network Attack 1 Low
216 Northern Mariana Islands (MP) Network Attack 1 Low
217 Saint Pierre and Miquelon (PM) Network Attack 1 Low
Integrates with
Wazuh Graylog Sentinel Splunk pfSense OPNsense Suricata NGINX Fail2ban CrowdSec Cloudflare WAF Cloudflare Workers n8n TheHive Home Assistant
Latest research

All research

How we measure threats

Every score on the platform is rooted in a public methodology: 73 honeypots and tarpits across multiple regions, cross-referenced with 22+ open-source feeds and refreshed every four hours. We publish the signals, the cadence and the caveats so you can replicate our maths.

Read the methodology

Brute-force activity — this week vs. last week
88,116 unique attackers
in the last 7 days (vs. 50,396 the week before)
+74.8%
week-over-week change
ASN & ISP league table — top 20 networks hosting malicious activity

Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.

# ASN Network / ISP Malicious IPs Risk score
1 AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN 26,309 35 medium
2 AS4134 No.31,Jin-rong Street 22,904 21 low
3 AS396982 GOOGLE-CLOUD-PLATFORM, US 13,860 49 medium
4 AS16509 Amazon.com, Inc. 12,221 38 medium
5 AS13335 CLOUDFLARENET, US 8,351 73 critical
6 AS45102 ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN 8,333 44 medium
7 AS14061 DigitalOcean, LLC 6,656 14 low
8 AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US 6,442 49 medium
9 AS14618 Amazon.com, Inc. 6,161 55 high
10 AS43420 ELTRONIK-AS, PL 5,668 100 critical
11 AS41931 EURONET-AS, PL 5,358 100 critical
12 AS50467 BESKID-MEDIA-AS, PL 5,253 100 critical
13 AS50188 KOLNET Sp. z o.o. 5,205 100 critical
14 AS6823 TR-3C1B-TELEKOM, TR 4,165 100 critical
15 AS42910 PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR 3,728 100 critical
16 AS62425 Mailbox Internet Hizmetleri Ltd. Sti. 3,575 100 critical
17 AS135905 VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP, VN 3,438 95 critical
18 AS47329 WDM-AS, PL 3,308 85 critical
19 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 3,093 38 medium
20 AS14789 CLOUDFLARENET-A, US 3,048 82 critical
Weekly digest — by email

A short Monday-morning email summarising the headline movements: brute-force trend, the ASN league table, the noisiest categories, and the IPs propagating fastest across the sensor estate. Opt in, unsubscribe with one click.

Embeddable badge

Drop this badge into your blog or status page — it always shows the live count:

Powered by ipinsights.io — 113,948 IPs blocked this week