Know who's knocking before you open the door.
Instant IP threat intelligence from 73 honeypots and 22+ threat feeds.
Your public IP is 216.73.217.131. Press Lookup for an instant threat-intelligence report — geolocation, ISP, blacklist presence, Tor / proxy / hosting flags, and a threat score.
Or try one of these:
73 honeypots 22+ threat feeds 100,955,411 IPs analysed refreshed every 4 hours
Independently operated · Methodology public · No data resale · Supported by UK Cyber Defence Ltd
Live threat intelligence — what the platform is currently watching
The numbers below are not marketing copy. They are the live counters from a network of 73 honeypots, tarpits and deception devices, cross-referenced against major blocklists and threat-intelligence feeds.
Recent malicious IPs
Live · connectingBrand-new attackers picked up by the sensor estate in the last 60 minutes, in priority order. Country, category and threat score for each address; the page updates visibly without a reload.
| IP | Country | Category | Threat | First seen | Last seen |
|---|---|---|---|---|---|
| 117.11.89.181 | China | malicious | 100 | ||
| 20.52.217.208 | Germany | Network Attack | 100 | ||
| 186.53.236.61 | Uruguay | Network Attack | 100 | ||
| 94.179.145.110 | Ukraine | malicious | 100 | ||
| 187.88.127.87 | Brazil | Network Attack | 100 | ||
| 186.232.141.159 | Brazil | Network Attack | 100 | ||
| 168.197.29.250 | Brazil | Network Attack | 100 | ||
| 109.131.29.200 | Belgium | Network Attack | 100 | ||
| 45.190.9.85 | Brazil | Network Attack | 100 | ||
| 1.173.31.21 | Taiwan | Network Attack | 100 | ||
| 58.19.104.228 | China | Network Attack | 100 | ||
| 175.17.191.214 | China | Network Attack | 100 | ||
| 36.36.197.20 | China | Network Attack | 100 | ||
| 185.20.180.54 | Russia | Network Attack | 100 | ||
| 38.199.99.95 | Brazil | Network Attack | 100 | ||
| 182.93.93.93 | Nepal | malicious | 100 | ||
| 172.71.245.56 | United States | Network Attack | 100 | ||
| 131.0.31.204 | Brazil | Network Attack | 100 | ||
| 186.46.16.105 | Ecuador | Network Attack | 100 | ||
| 8.219.215.242 | Singapore | Network Attack | 100 |
When attackers are most active right now
AI Agent Traffic (Last 24 Hours)
methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed.
Methodology
Where attacks are coming from right now
What attackers are trying to do this week
Country league table — every country hosting malicious activity right now
Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.
| # | Country | Dominant category | Blacklisted IPs ▼ | Risk | Most recent listing |
|---|---|---|---|---|---|
| 1 | United States (US) | Network Attack | 86,763 | Critical | |
| 2 | China (CN) | Network Attack | 78,987 | Critical | |
| 3 | Türkiye (TR) | Network Attack | 34,909 | Critical | |
| 4 | Brazil (BR) | Network Attack | 26,340 | Critical | |
| 5 | Poland (PL) | Network Attack | 16,206 | Critical | |
| 6 | India (IN) | Network Attack | 13,915 | Critical | |
| 7 | Russia (RU) | malicious | 13,734 | Critical | |
| 8 | Germany (DE) | malicious | 12,104 | Critical | |
| 9 | United Kingdom (GB) | malicious | 9,971 | Critical | |
| 10 | Hong Kong (HK) | malicious | 7,908 | Critical | |
| 11 | The Netherlands (NL) | malicious | 7,902 | Critical | |
| 12 | Belgium (BE) | Network Attack | 7,626 | Critical | |
| 13 | Singapore (SG) | malicious | 7,537 | Critical | |
| 14 | France (FR) | malicious | 6,777 | Critical | |
| 15 | Indonesia (ID) | Network Attack | 6,060 | Critical | |
| 16 | South Korea (KR) | Network Attack | 5,954 | Critical | |
| 17 | Pakistan (PK) | Network Attack | 5,615 | Critical | |
| 18 | Japan (JP) | malicious | 5,572 | Critical | |
| 19 | Mexico (MX) | Network Attack | 5,309 | Critical | |
| 20 | Bangladesh (BD) | Network Attack | 5,004 | Critical | |
| 21 | Vietnam (VN) | Network Attack | 4,923 | Critical | |
| 22 | Canada (CA) | Network Attack | 4,269 | Critical | |
| 23 | Ukraine (UA) | Network Attack | 3,637 | Critical | |
| 24 | Taiwan (TW) | Network Attack | 3,566 | High | |
| 25 | Thailand (TH) | Network Attack | 3,449 | High | |
| 26 | Argentina (AR) | Network Attack | 3,426 | High | |
| 27 | Italy (IT) | Network Attack | 2,751 | High | |
| 28 | Sweden (SE) | Network Attack | 2,562 | High | |
| 29 | Australia (AU) | Network Attack | 2,428 | High | |
| 30 | Spain (ES) | Network Attack | 2,427 | High | |
| 31 | Ireland (IE) | Network Attack | 2,425 | High | |
| 32 | South Africa (ZA) | Network Attack | 2,254 | High | |
| 33 | Malaysia (MY) | malicious | 2,151 | High | |
| 34 | Iran (IR) | malicious | 2,059 | High | |
| 35 | Colombia (CO) | Network Attack | 2,020 | High | |
| 36 | Seychelles (SC) | malicious | 1,882 | High | |
| 37 | Switzerland (CH) | Network Attack | 1,798 | High | |
| 38 | Philippines (PH) | Network Attack | 1,693 | High | |
| 39 | Venezuela (VE) | Network Attack | 1,687 | High | |
| 40 | Saudi Arabia (SA) | Network Attack | 1,618 | High | |
| 41 | Bulgaria (BG) | malicious | 1,551 | High | |
| 42 | United Arab Emirates (AE) | Network Attack | 1,530 | High | |
| 43 | Egypt (EG) | Network Attack | 1,403 | High | |
| 44 | Finland (FI) | malicious | 1,226 | High | |
| 45 | Romania (RO) | malicious | 1,223 | High | |
| 46 | Uruguay (UY) | Network Attack | 1,219 | High | |
| 47 | Israel (IL) | Network Attack | 1,197 | High | |
| 48 | Morocco (MA) | Network Attack | 1,185 | High | |
| 49 | Portugal (PT) | malicious | 984 | High | |
| 50 | Uzbekistan (UZ) | Network Attack | 962 | High | |
| 51 | Chile (CL) | Network Attack | 915 | High | |
| 52 | Republic of Lithuania (LT) | Network Attack | 861 | High | |
| 53 | Iraq (IQ) | Network Attack | 856 | High | |
| 54 | Nigeria (NG) | Network Attack | 849 | High | |
| 55 | Ecuador (EC) | Network Attack | 806 | High | |
| 56 | Kenya (KE) | Network Attack | 753 | Medium | |
| 57 | Kazakhstan (KZ) | Network Attack | 716 | Medium | |
| 58 | Czechia (CZ) | Network Attack | 663 | Medium | |
| 59 | Croatia (HR) | Network Attack | 651 | Medium | |
| 60 | Republic of Moldova (MD) | malicious | 611 | Medium | |
| 61 | Algeria (DZ) | Network Attack | 598 | Medium | |
| 62 | Peru (PE) | Network Attack | 589 | Medium | |
| 63 | Austria (AT) | malicious | 583 | Medium | |
| 64 | Denmark (DK) | Network Attack | 558 | Medium | |
| 65 | Hungary (HU) | Network Attack | 535 | Medium | |
| 66 | Dominican Republic (DO) | Network Attack | 484 | Medium | |
| 67 | Norway (NO) | Network Attack | 483 | Medium | |
| 68 | Tunisia (TN) | Network Attack | 478 | Medium | |
| 69 | Tanzania (TZ) | Network Attack | 464 | Medium | |
| 70 | Paraguay (PY) | Network Attack | 457 | Medium | |
| 71 | Greece (GR) | Network Attack | 456 | Medium | |
| 72 | Panama (PA) | Network Attack | 455 | Medium | |
| 73 | Azerbaijan (AZ) | Network Attack | 391 | Medium | |
| 74 | Senegal (SN) | Network Attack | 391 | Medium | |
| 75 | Palestine (PS) | Network Attack | 370 | Medium | |
| 76 | Mauritius (MU) | Network Attack | 364 | Medium | |
| 77 | Bolivia (BO) | Network Attack | 354 | Medium | |
| 78 | Slovenia (SI) | Network Attack | 344 | Medium | |
| 79 | Cambodia (KH) | Network Attack | 331 | Medium | |
| 80 | Ethiopia (ET) | Network Attack | 329 | Medium | |
| 81 | Nepal (NP) | Network Attack | 329 | Medium | |
| 82 | Georgia (GE) | Network Attack | 327 | Medium | |
| 83 | New Zealand (NZ) | Network Attack | 321 | Medium | |
| 84 | Armenia (AM) | Network Attack | 319 | Medium | |
| 85 | Latvia (LV) | malicious | 305 | Medium | |
| 86 | Costa Rica (CR) | Network Attack | 291 | Medium | |
| 87 | Syria (SY) | Network Attack | 287 | Medium | |
| 88 | Serbia (RS) | Network Attack | 282 | Medium | |
| 89 | Jordan (JO) | Network Attack | 268 | Medium | |
| 90 | Turkmenistan (TM) | malicious | 267 | Medium | |
| 91 | Honduras (HN) | Network Attack | 266 | Medium | |
| 92 | Belarus (BY) | Network Attack | 246 | Medium | |
| 93 | Sri Lanka (LK) | Network Attack | 243 | Medium | |
| 94 | Albania (AL) | Network Attack | 238 | Medium | |
| 95 | Oman (OM) | Network Attack | 231 | Medium | |
| 96 | Luxembourg (LU) | Network Attack | 230 | Medium | |
| 97 | North Macedonia (MK) | Network Attack | 230 | Medium | |
| 98 | Qatar (QA) | Network Attack | 211 | Medium | |
| 99 | Mongolia (MN) | Network Attack | 202 | Medium | |
| 100 | Cyprus (CY) | Network Attack | 189 | Medium | |
| 101 | British Virgin Islands (VG) | malicious | 182 | Medium | |
| 102 | Estonia (EE) | malicious | 178 | Medium | |
| 103 | Kuwait (KW) | Network Attack | 177 | Medium | |
| 104 | Myanmar (MM) | Network Attack | 170 | Medium | |
| 105 | Lebanon (LB) | Network Attack | 167 | Medium | |
| 106 | Slovakia (SK) | malicious | 162 | Medium | |
| 107 | Bahrain (BH) | Network Attack | 158 | Medium | |
| 108 | Angola (AO) | Network Attack | 156 | Medium | |
| 109 | Ghana (GH) | malicious | 155 | Medium | |
| 110 | Guatemala (GT) | Network Attack | 153 | Low | |
| 111 | Laos (LA) | Network Attack | 135 | Low | |
| 112 | Burkina Faso (BF) | Network Attack | 134 | Low | |
| 113 | Iceland (IS) | tor_exit | 134 | Low | |
| 114 | Jamaica (JM) | Network Attack | 134 | Low | |
| 115 | Belize (BZ) | Network Attack | 123 | Low | |
| 116 | Uganda (UG) | malicious | 119 | Low | |
| 117 | Ivory Coast (CI) | Network Attack | 118 | Low | |
| 118 | Trinidad and Tobago (TT) | Network Attack | 113 | Low | |
| 119 | Bosnia and Herzegovina (BA) | malicious | 111 | Low | |
| 120 | Botswana (BW) | Network Attack | 111 | Low | |
| 121 | Kyrgyzstan (KG) | Network Attack | 104 | Low | |
| 122 | Mozambique (MZ) | Network Attack | 103 | Low | |
| 123 | Nicaragua (NI) | Network Attack | 102 | Low | |
| 124 | Puerto Rico (PR) | Network Attack | 97 | Low | |
| 125 | Libya (LY) | Network Attack | 95 | Low | |
| 126 | Macao (MO) | Network Attack | 89 | Low | |
| 127 | Zambia (ZM) | Network Attack | 86 | Low | |
| 128 | Kosovo (XK) | Network Attack | 84 | Low | |
| 129 | Cameroon (CM) | malicious | 74 | Low | |
| 130 | Zimbabwe (ZW) | Network Attack | 73 | Low | |
| 131 | Congo Republic (CG) | Network Attack | 72 | Low | |
| 132 | Malta (MT) | Network Attack | 72 | Low | |
| 133 | Gabon (GA) | Network Attack | 67 | Low | |
| 134 | El Salvador (SV) | Network Attack | 67 | Low | |
| 135 | Rwanda (RW) | Network Attack | 57 | Low | |
| 136 | Guyana (GY) | Network Attack | 54 | Low | |
| 137 | Namibia (NA) | Network Attack | 52 | Low | |
| 138 | Togo (TG) | Network Attack | 50 | Low | |
| 139 | Tajikistan (TJ) | Network Attack | 50 | Low | |
| 140 | Mali (ML) | Network Attack | 44 | Low | |
| 141 | Benin (BJ) | malicious | 40 | Low | |
| 142 | Suriname (SR) | Network Attack | 40 | Low | |
| 143 | Afghanistan (AF) | malicious | 39 | Low | |
| 144 | Barbados (BB) | Network Attack | 39 | Low | |
| 145 | Maldives (MV) | Network Attack | 39 | Low | |
| 146 | Montenegro (ME) | malicious | 33 | Low | |
| 147 | New Caledonia (NC) | Network Attack | 33 | Low | |
| 148 | Réunion (RE) | Network Attack | 33 | Low | |
| 149 | Congo (DRC) (CD) | Network Attack | 32 | Low | |
| 150 | Madagascar (MG) | Network Attack | 32 | Low | |
| 151 | Gambia (GM) | Network Attack | 26 | Low | |
| 152 | Monaco (MC) | malicious | 26 | Low | |
| 153 | Yemen (YE) | malicious | 26 | Low | |
| 154 | Guam (GU) | Network Attack | 25 | Low | |
| 155 | Fiji (FJ) | Network Attack | 24 | Low | |
| 156 | Andorra (AD) | Network Attack | 23 | Low | |
| 157 | Martinique (MQ) | Network Attack | 23 | Low | |
| 158 | Somalia (SO) | Network Attack | 22 | Low | |
| 159 | Haiti (HT) | Network Attack | 21 | Low | |
| 160 | Bhutan (BT) | Network Attack | 19 | Low | |
| 161 | Guadeloupe (GP) | malicious | 18 | Low | |
| 162 | Liechtenstein (LI) | tor_exit | 18 | Low | |
| 163 | French Polynesia (PF) | Network Attack | 18 | Low | |
| 164 | Cabo Verde (CV) | Network Attack | 16 | Low | |
| 165 | Curaçao (CW) | Network Attack | 16 | Low | |
| 166 | Djibouti (DJ) | Network Attack | 16 | Low | |
| 167 | Mauritania (MR) | Network Attack | 15 | Low | |
| 168 | Malawi (MW) | Network Attack | 15 | Low | |
| 169 | Brunei (BN) | malicious | 13 | Low | |
| 170 | Isle of Man (IM) | Network Attack | 12 | Low | |
| 171 | Lesotho (LS) | Network Attack | 12 | Low | |
| 172 | Sint Maarten (SX) | Network Attack | 11 | Low | |
| 173 | Sudan (SD) | Network Attack | 10 | Low | |
| 174 | Cayman Islands (KY) | Network Attack | 9 | Low | |
| 175 | Mayotte (YT) | Network Attack | 9 | Low | |
| 176 | Bahamas (BS) | Network Attack | 8 | Low | |
| 177 | Grenada (GD) | Network Attack | 8 | Low | |
| 178 | Papua New Guinea (PG) | Network Attack | 8 | Low | |
| 179 | Guinea (GN) | Network Attack | 7 | Low | |
| 180 | Niger (NE) | Network Attack | 7 | Low | |
| 181 | Eswatini (SZ) | malicious | 7 | Low | |
| 182 | American Samoa (AS) | Network Attack | 6 | Low | |
| 183 | Burundi (BI) | malicious | 6 | Low | |
| 184 | Cuba (CU) | Network Attack | 6 | Low | |
| 185 | French Guiana (GF) | Network Attack | 6 | Low | |
| 186 | Liberia (LR) | malicious | 6 | Low | |
| 187 | Chad (TD) | malicious | 6 | Low | |
| 188 | Vanuatu (VU) | Network Attack | 6 | Low | |
| 189 | Guernsey (GG) | Network Attack | 5 | Low | |
| 190 | Equatorial Guinea (GQ) | Network Attack | 5 | Low | |
| 191 | Jersey (JE) | Network Attack | 5 | Low | |
| 192 | Solomon Islands (SB) | Network Attack | 5 | Low | |
| 193 | Antigua and Barbuda (AG) | malicious | 4 | Low | |
| 194 | Aruba (AW) | Network Attack | 4 | Low | |
| 195 | Dominica (DM) | Network Attack | 4 | Low | |
| 196 | Eritrea (ER) | Network Attack | 4 | Low | |
| 197 | Comoros (KM) | Network Attack | 4 | Low | |
| 198 | Bermuda (BM) | Network Attack | 3 | Low | |
| 199 | Sierra Leone (SL) | Network Attack | 3 | Low | |
| 200 | South Sudan (SS) | Network Attack | 3 | Low | |
| 201 | Timor-Leste (TL) | Network Attack | 3 | Low | |
| 202 | U.S. Virgin Islands (VI) | malicious | 3 | Low | |
| 203 | Samoa (WS) | Network Attack | 3 | Low | |
| 204 | Åland Islands (AX) | malicious | 2 | Low | |
| 205 | Bonaire, Sint Eustatius and Saba (BQ) | malware | 2 | Low | |
| 206 | Faroe Islands (FO) | malicious | 2 | Low | |
| 207 | Greenland (GL) | Network Attack | 2 | Low | |
| 208 | Saint Kitts and Nevis (KN) | malicious | 2 | Low | |
| 209 | Saint Lucia (LC) | Network Attack | 2 | Low | |
| 210 | Tonga (TO) | Network Attack | 2 | Low | |
| 211 | Saint Vincent and the Grenadines (VC) | Network Attack | 2 | Low | |
| 212 | Anguilla (AI) | Network Attack | 1 | Low | |
| 213 | Central African Republic (CF) | Network Attack | 1 | Low | |
| 214 | Gibraltar (GI) | Network Attack | 1 | Low | |
| 215 | Kiribati (KI) | Network Attack | 1 | Low | |
| 216 | Northern Mariana Islands (MP) | Network Attack | 1 | Low | |
| 217 | São Tomé and Príncipe (ST) | Network Attack | 1 | Low |
No countries match the current filters.
Integrates with
How we measure threats
Every score on the platform is rooted in a public methodology: 73 honeypots and tarpits across multiple regions, cross-referenced with 22+ open-source feeds and refreshed every four hours. We publish the signals, the cadence and the caveats so you can replicate our maths.
Brute-force activity — this week vs. last week
59,061 unique attackers
in the last 7 days
(vs. 66,822 the week before)
-11.6%
week-over-week change
ASN & ISP league table — top 20 networks hosting malicious activity
Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.
| # | ASN | Network / ISP | Malicious IPs | Risk score |
|---|---|---|---|---|
| 1 | AS4837 | CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN | 30,810 | 45 medium |
| 2 | AS4134 | No.31,Jin-rong Street | 26,119 | 25 medium |
| 3 | AS396982 | GOOGLE-CLOUD-PLATFORM, US | 13,941 | 58 high |
| 4 | AS16509 | Amazon.com, Inc. | 13,715 | 49 medium |
| 5 | AS45102 | ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN | 9,010 | 51 high |
| 6 | AS13335 | CLOUDFLARENET, US | 8,355 | 87 critical |
| 7 | AS14618 | Amazon.com, Inc. | 6,349 | 63 high |
| 8 | AS14061 | DigitalOcean, LLC | 5,653 | 17 low |
| 9 | AS8075 | MICROSOFT-CORP-MSN-AS-BLOCK, US | 5,517 | 48 medium |
| 10 | AS6823 | TR-3C1B-TELEKOM, TR | 4,165 | 100 critical |
| 11 | AS42910 | PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETI PREMIERDC - SH, TR | 3,726 | 100 critical |
| 12 | AS62425 | Mailbox Internet Hizmetleri Ltd. Sti. | 3,575 | 100 critical |
| 13 | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | 3,222 | 41 medium |
| 14 | AS14789 | CLOUDFLARENET-A, US | 2,950 | 96 critical |
| 15 | AS6205 | HIZLINET-TEKNOLOJI, TR | 2,868 | 100 critical |
| 16 | AS9829 | National Internet Backbone | 2,787 | 38 medium |
| 17 | AS4766 | Korea Telecom | 2,784 | 47 medium |
| 18 | AS8151 | UNINET, MX | 2,737 | 53 high |
| 19 | AS42216 | Netviser Bilisim Teknolojileri San. Ve Tic. Ltd. Sti. | 2,638 | 100 critical |
| 20 | AS394474 | WHITELABELCOLO393, US | 2,579 | 98 critical |
Weekly digest — by email
A short Monday-morning email summarising the headline movements: brute-force trend, the ASN league table, the noisiest categories, and the IPs propagating fastest across the sensor estate. Opt in, unsubscribe with one click.
Embeddable badge
Drop this badge into your blog or status page — it always shows the live count: