Know who's knocking before you open the door.
Instant IP threat intelligence from 73 honeypots and 22+ threat feeds.
Your public IP is 216.73.217.106. Press Lookup for an instant threat-intelligence report — geolocation, ISP, blacklist presence, Tor / proxy / hosting flags, and a threat score.
Or try one of these:
73 honeypots 22+ threat feeds 101,388,261 IPs analysed refreshed every 4 hours
Independently operated · Methodology public · No data resale · Supported by UK Cyber Defence Ltd
Live threat intelligence — what the platform is currently watching
The numbers below are not marketing copy. They are the live counters from a network of 73 honeypots, tarpits and deception devices, cross-referenced against major blocklists and threat-intelligence feeds.
Recent malicious IPs
Live · connectingBrand-new attackers picked up by the sensor estate in the last 60 minutes, in priority order. Country, category and threat score for each address; the page updates visibly without a reload.
| IP | Country | Category | Threat | First seen | Last seen |
|---|---|---|---|---|---|
| 116.206.253.167 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.255.170 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.255.162 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.253.202 | Bangladesh | Network Attack | 100 | ||
| 116.206.254.19 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.255.171 | Bangladesh | Network Attack | 100 | ||
| 116.206.253.188 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.255.139 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 116.206.254.21 | Bangladesh | Network Attack | 100 | ||
| 116.206.255.185 | Bangladesh | VoIP / SIP Probe | 100 | ||
| 79.24.73.167 | Italy | Network Attack | 100 | ||
| 172.105.7.194 | Canada | Network Attack | 100 | ||
| 43.106.111.182 | Singapore | malicious | 100 | ||
| 119.179.251.207 | China | Network Attack | 100 | ||
| 103.204.95.78 | India | SMTP Probe | 100 | ||
| 122.237.111.225 | China | Network Attack | 100 | ||
| 119.30.119.145 | Pakistan | Network Attack | 100 | ||
| 172.240.67.132 | United States | Network Attack | 100 | ||
| 172.240.67.131 | United States | Network Attack | 100 | ||
| 172.240.67.130 | United States | Network Attack | 100 |
When attackers are most active right now
AI Agent Traffic (Last 24 Hours)
methodology v1.0
0.0%
share of observed sources classed probable or confirmed agentic in the last 24 hours
Probable: 0
Confirmed: 0
of 0 total
90-day daily trend of unique sources classed probable or confirmed.
Methodology
Where attacks are coming from right now
What attackers are trying to do this week
Country league table — every country hosting malicious activity right now
Sort by listings, dominant category or recency; filter by category and risk level. Click a country to drill in.
| # | Country | Dominant category | Blacklisted IPs ▼ | Risk | Most recent listing |
|---|---|---|---|---|---|
| 1 | Poland (PL) | Network Attack | 119,663 | Critical | |
| 2 | United States (US) | Network Attack | 96,926 | Critical | |
| 3 | China (CN) | Network Attack | 55,335 | Critical | |
| 4 | Türkiye (TR) | Network Attack | 31,532 | Critical | |
| 5 | Brazil (BR) | Network Attack | 21,527 | Critical | |
| 6 | Russia (RU) | Network Attack | 18,448 | Critical | |
| 7 | Vietnam (VN) | Network Attack | 17,547 | Critical | |
| 8 | Germany (DE) | Network Attack | 16,935 | Critical | |
| 9 | United Kingdom (GB) | malicious | 10,673 | Critical | |
| 10 | The Netherlands (NL) | Network Attack | 9,969 | Critical | |
| 11 | France (FR) | Network Attack | 9,660 | Critical | |
| 12 | India (IN) | malicious | 9,646 | Critical | |
| 13 | Belgium (BE) | Network Attack | 8,567 | Critical | |
| 14 | Hong Kong (HK) | Network Attack | 8,371 | Critical | |
| 15 | Ukraine (UA) | Network Attack | 7,142 | Critical | |
| 16 | Japan (JP) | Network Attack | 6,918 | Critical | |
| 17 | Singapore (SG) | malicious | 6,010 | Critical | |
| 18 | Bangladesh (BD) | Network Attack | 5,761 | Critical | |
| 19 | Argentina (AR) | Network Attack | 5,306 | Critical | |
| 20 | Canada (CA) | Network Attack | 4,850 | Critical | |
| 21 | Pakistan (PK) | Network Attack | 4,766 | Critical | |
| 22 | South Korea (KR) | malicious | 4,741 | Critical | |
| 23 | Indonesia (ID) | Network Attack | 4,662 | Critical | |
| 24 | Seychelles (SC) | Network Attack | 4,035 | High | |
| 25 | Italy (IT) | Network Attack | 3,379 | High | |
| 26 | Mexico (MX) | Network Attack | 3,279 | High | |
| 27 | Taiwan (TW) | Network Attack | 3,081 | High | |
| 28 | Spain (ES) | Network Attack | 2,990 | High | |
| 29 | Finland (FI) | Network Attack | 2,796 | High | |
| 30 | Thailand (TH) | Network Attack | 2,406 | High | |
| 31 | Israel (IL) | Network Attack | 2,269 | High | |
| 32 | Sweden (SE) | malicious | 1,949 | High | |
| 33 | Saudi Arabia (SA) | Network Attack | 1,936 | High | |
| 34 | Iran (IR) | Network Attack | 1,769 | High | |
| 35 | Switzerland (CH) | Network Attack | 1,656 | High | |
| 36 | Malaysia (MY) | malicious | 1,625 | High | |
| 37 | United Arab Emirates (AE) | Network Attack | 1,593 | High | |
| 38 | Colombia (CO) | Network Attack | 1,534 | High | |
| 39 | Australia (AU) | Network Attack | 1,471 | High | |
| 40 | South Africa (ZA) | Network Attack | 1,452 | High | |
| 41 | Philippines (PH) | Network Attack | 1,389 | High | |
| 42 | Bulgaria (BG) | malicious | 1,345 | High | |
| 43 | Romania (RO) | malicious | 1,313 | High | |
| 44 | Chile (CL) | Network Attack | 1,299 | High | |
| 45 | Uzbekistan (UZ) | malicious | 1,258 | High | |
| 46 | Ireland (IE) | Network Attack | 1,229 | High | |
| 47 | North Korea (KP) | Network Attack | 1,024 | High | |
| 48 | Republic of Lithuania (LT) | malicious | 872 | High | |
| 49 | Portugal (PT) | malicious | 836 | High | |
| 50 | Morocco (MA) | Network Attack | 802 | High | |
| 51 | Venezuela (VE) | Network Attack | 768 | High | |
| 52 | Egypt (EG) | Network Attack | 760 | High | |
| 53 | Czechia (CZ) | Network Attack | 700 | High | |
| 54 | Qatar (QA) | Network Attack | 692 | High | |
| 55 | Norway (NO) | Network Attack | 648 | High | |
| 56 | Ecuador (EC) | Network Attack | 629 | Medium | |
| 57 | Cyprus (CY) | Network Attack | 604 | Medium | |
| 58 | Austria (AT) | malicious | 544 | Medium | |
| 59 | Kazakhstan (KZ) | Network Attack | 520 | Medium | |
| 60 | Kenya (KE) | Network Attack | 518 | Medium | |
| 61 | Iraq (IQ) | Network Attack | 482 | Medium | |
| 62 | Republic of Moldova (MD) | malicious | 470 | Medium | |
| 63 | Tunisia (TN) | Network Attack | 447 | Medium | |
| 64 | Nigeria (NG) | Network Attack | 422 | Medium | |
| 65 | Estonia (EE) | Network Attack | 405 | Medium | |
| 66 | Serbia (RS) | Network Attack | 395 | Medium | |
| 67 | Hungary (HU) | Network Attack | 368 | Medium | |
| 68 | Peru (PE) | Network Attack | 345 | Medium | |
| 69 | Algeria (DZ) | Network Attack | 339 | Medium | |
| 70 | Mauritius (MU) | Network Attack | 338 | Medium | |
| 71 | Latvia (LV) | malicious | 315 | Medium | |
| 72 | Azerbaijan (AZ) | Network Attack | 311 | Medium | |
| 73 | Uruguay (UY) | Network Attack | 309 | Medium | |
| 74 | Myanmar (MM) | Network Attack | 303 | Medium | |
| 75 | Georgia (GE) | Network Attack | 286 | Medium | |
| 76 | Nepal (NP) | Network Attack | 282 | Medium | |
| 77 | Turkmenistan (TM) | malicious | 282 | Medium | |
| 78 | Armenia (AM) | Network Attack | 281 | Medium | |
| 79 | Greece (GR) | Network Attack | 263 | Medium | |
| 80 | Bolivia (BO) | Network Attack | 262 | Medium | |
| 81 | Denmark (DK) | Network Attack | 259 | Medium | |
| 82 | Dominican Republic (DO) | Network Attack | 240 | Medium | |
| 83 | New Zealand (NZ) | Network Attack | 230 | Medium | |
| 84 | Sri Lanka (LK) | Network Attack | 229 | Medium | |
| 85 | Cambodia (KH) | malicious | 222 | Medium | |
| 86 | Belarus (BY) | Network Attack | 213 | Medium | |
| 87 | Panama (PA) | malicious | 213 | Medium | |
| 88 | British Virgin Islands (VG) | malicious | 213 | Medium | |
| 89 | Paraguay (PY) | Network Attack | 205 | Medium | |
| 90 | Slovenia (SI) | malicious | 202 | Medium | |
| 91 | Albania (AL) | Network Attack | 182 | Medium | |
| 92 | Palestine (PS) | Network Attack | 179 | Medium | |
| 93 | Costa Rica (CR) | Network Attack | 164 | Medium | |
| 94 | Croatia (HR) | Network Attack | 155 | Medium | |
| 95 | Oman (OM) | Network Attack | 154 | Medium | |
| 96 | Luxembourg (LU) | malicious | 153 | Medium | |
| 97 | Bosnia and Herzegovina (BA) | Network Attack | 152 | Medium | |
| 98 | Kuwait (KW) | Network Attack | 147 | Medium | |
| 99 | Jordan (JO) | Network Attack | 146 | Medium | |
| 100 | Ethiopia (ET) | malicious | 140 | Medium | |
| 101 | Bahrain (BH) | Network Attack | 134 | Medium | |
| 102 | Ghana (GH) | malicious | 133 | Medium | |
| 103 | Slovakia (SK) | Network Attack | 131 | Medium | |
| 104 | Iceland (IS) | malicious | 129 | Medium | |
| 105 | Mongolia (MN) | malicious | 129 | Medium | |
| 106 | Senegal (SN) | Network Attack | 124 | Medium | |
| 107 | Puerto Rico (PR) | Network Attack | 121 | Medium | |
| 108 | Belize (BZ) | Network Attack | 115 | Medium | |
| 109 | Ivory Coast (CI) | Network Attack | 113 | Medium | |
| 110 | Tanzania (TZ) | Network Attack | 107 | Low | |
| 111 | Guatemala (GT) | Network Attack | 99 | Low | |
| 112 | Lebanon (LB) | Network Attack | 97 | Low | |
| 113 | Honduras (HN) | Network Attack | 90 | Low | |
| 114 | Uganda (UG) | malicious | 80 | Low | |
| 115 | Kyrgyzstan (KG) | Network Attack | 78 | Low | |
| 116 | Macao (MO) | Network Attack | 75 | Low | |
| 117 | Burkina Faso (BF) | Network Attack | 74 | Low | |
| 118 | Cameroon (CM) | malicious | 73 | Low | |
| 119 | North Macedonia (MK) | Network Attack | 69 | Low | |
| 120 | Mozambique (MZ) | Network Attack | 69 | Low | |
| 121 | Botswana (BW) | malicious | 67 | Low | |
| 122 | Togo (TG) | Network Attack | 67 | Low | |
| 123 | Syria (SY) | Network Attack | 64 | Low | |
| 124 | Laos (LA) | Network Attack | 60 | Low | |
| 125 | Angola (AO) | Network Attack | 59 | Low | |
| 126 | Trinidad and Tobago (TT) | Network Attack | 59 | Low | |
| 127 | Libya (LY) | Network Attack | 58 | Low | |
| 128 | Liberia (LR) | Network Attack | 54 | Low | |
| 129 | Kosovo (XK) | Network Attack | 53 | Low | |
| 130 | Jamaica (JM) | Network Attack | 52 | Low | |
| 131 | Malta (MT) | Network Attack | 51 | Low | |
| 132 | El Salvador (SV) | Network Attack | 51 | Low | |
| 133 | Zimbabwe (ZW) | Network Attack | 45 | Low | |
| 134 | Congo Republic (CG) | Network Attack | 44 | Low | |
| 135 | Tajikistan (TJ) | malicious | 43 | Low | |
| 136 | Réunion (RE) | Network Attack | 37 | Low | |
| 137 | Mali (ML) | Network Attack | 36 | Low | |
| 138 | Nicaragua (NI) | Network Attack | 35 | Low | |
| 139 | Zambia (ZM) | malicious | 34 | Low | |
| 140 | Benin (BJ) | malicious | 33 | Low | |
| 141 | Maldives (MV) | Network Attack | 33 | Low | |
| 142 | Montenegro (ME) | malicious | 32 | Low | |
| 143 | Yemen (YE) | Network Attack | 31 | Low | |
| 144 | Afghanistan (AF) | malicious | 29 | Low | |
| 145 | Rwanda (RW) | Network Attack | 29 | Low | |
| 146 | Cabo Verde (CV) | Network Attack | 24 | Low | |
| 147 | Gabon (GA) | Network Attack | 24 | Low | |
| 148 | Barbados (BB) | Network Attack | 22 | Low | |
| 149 | Monaco (MC) | malicious | 22 | Low | |
| 150 | Guadeloupe (GP) | Network Attack | 21 | Low | |
| 151 | Martinique (MQ) | Network Attack | 21 | Low | |
| 152 | Namibia (NA) | Network Attack | 21 | Low | |
| 153 | Madagascar (MG) | Network Attack | 20 | Low | |
| 154 | Malawi (MW) | malicious | 20 | Low | |
| 155 | Timor-Leste (TL) | Network Attack | 20 | Low | |
| 156 | Curaçao (CW) | Network Attack | 19 | Low | |
| 157 | New Caledonia (NC) | Network Attack | 18 | Low | |
| 158 | Bhutan (BT) | Network Attack | 17 | Low | |
| 159 | Congo (DRC) (CD) | malicious | 17 | Low | |
| 160 | French Guiana (GF) | Network Attack | 17 | Low | |
| 161 | Guam (GU) | Network Attack | 17 | Low | |
| 162 | Gambia (GM) | Network Attack | 16 | Low | |
| 163 | Liechtenstein (LI) | tor_exit | 15 | Low | |
| 164 | Brunei (BN) | Network Attack | 14 | Low | |
| 165 | Andorra (AD) | malicious | 13 | Low | |
| 166 | Guyana (GY) | Network Attack | 13 | Low | |
| 167 | Mauritania (MR) | malicious | 13 | Low | |
| 168 | French Polynesia (PF) | Network Attack | 13 | Low | |
| 169 | Bahamas (BS) | Network Attack | 12 | Low | |
| 170 | Fiji (FJ) | Network Attack | 12 | Low | |
| 171 | Sint Maarten (SX) | Network Attack | 11 | Low | |
| 172 | Cuba (CU) | Network Attack | 10 | Low | |
| 173 | Lesotho (LS) | Network Attack | 10 | Low | |
| 174 | Somalia (SO) | malicious | 10 | Low | |
| 175 | Djibouti (DJ) | Network Attack | 9 | Low | |
| 176 | Eritrea (ER) | malicious | 9 | Low | |
| 177 | Isle of Man (IM) | malicious | 9 | Low | |
| 178 | Sudan (SD) | malicious | 9 | Low | |
| 179 | Haiti (HT) | Network Attack | 8 | Low | |
| 180 | Eswatini (SZ) | Network Attack | 7 | Low | |
| 181 | Burundi (BI) | malicious | 6 | Low | |
| 182 | Cayman Islands (KY) | Network Attack | 6 | Low | |
| 183 | Suriname (SR) | Network Attack | 6 | Low | |
| 184 | Aruba (AW) | Network Attack | 5 | Low | |
| 185 | Niger (NE) | Network Attack | 5 | Low | |
| 186 | Papua New Guinea (PG) | Network Attack | 5 | Low | |
| 187 | U.S. Virgin Islands (VI) | Network Attack | 5 | Low | |
| 188 | Vanuatu (VU) | Network Attack | 5 | Low | |
| 189 | Dominica (DM) | malicious | 4 | Low | |
| 190 | Grenada (GD) | Network Attack | 4 | Low | |
| 191 | Jersey (JE) | Network Attack | 4 | Low | |
| 192 | Antigua and Barbuda (AG) | Network Attack | 3 | Low | |
| 193 | Anguilla (AI) | Network Attack | 3 | Low | |
| 194 | Faroe Islands (FO) | malicious | 3 | Low | |
| 195 | Guernsey (GG) | Network Attack | 3 | Low | |
| 196 | Saint Lucia (LC) | Network Attack | 3 | Low | |
| 197 | Chad (TD) | malicious | 3 | Low | |
| 198 | Bermuda (BM) | Network Attack | 2 | Low | |
| 199 | Bonaire, Sint Eustatius and Saba (BQ) | Network Attack | 2 | Low | |
| 200 | Kiribati (KI) | Network Attack | 2 | Low | |
| 201 | Comoros (KM) | malicious | 2 | Low | |
| 202 | Saint Martin (MF) | Network Attack | 2 | Low | |
| 203 | Saint Pierre and Miquelon (PM) | Network Attack | 2 | Low | |
| 204 | Sierra Leone (SL) | Network Attack | 2 | Low | |
| 205 | San Marino (SM) | Network Attack | 2 | Low | |
| 206 | South Sudan (SS) | Network Attack | 2 | Low | |
| 207 | Mayotte (YT) | HTTP Probe | 2 | Low | |
| 208 | Åland Islands (AX) | malicious | 1 | Low | |
| 209 | Greenland (GL) | Network Attack | 1 | Low | |
| 210 | Guinea (GN) | Network Attack | 1 | Low | |
| 211 | Equatorial Guinea (GQ) | Network Attack | 1 | Low | |
| 212 | Saint Kitts and Nevis (KN) | malicious | 1 | Low | |
| 213 | Marshall Islands (MH) | Network Attack | 1 | Low | |
| 214 | Solomon Islands (SB) | Network Attack | 1 | Low | |
| 215 | Turks and Caicos Islands (TC) | Network Attack | 1 | Low | |
| 216 | Saint Vincent and the Grenadines (VC) | Network Attack | 1 | Low | |
| 217 | Samoa (WS) | Network Attack | 1 | Low |
No countries match the current filters.
Integrates with
How we measure threats
Every score on the platform is rooted in a public methodology: 73 honeypots and tarpits across multiple regions, cross-referenced with 22+ open-source feeds and refreshed every four hours. We publish the signals, the cadence and the caveats so you can replicate our maths.
Brute-force activity — this week vs. last week
59,373 unique attackers
in the last 7 days
(vs. 36,824 the week before)
+61.2%
week-over-week change
ASN & ISP league table — top 20 networks hosting malicious activity
Networks ranked by the number of currently-flagged IPs they host. Click an ASN for the full profile.
| # | ASN | Network / ISP | Malicious IPs | Risk score |
|---|---|---|---|---|
| 1 | AS200373 | DREI-K-TECH-GMBH, DE | 28,788 | 97 critical |
| 2 | AS4837 | CHINA169-BACKBONE CHINA UNICOM China169 Backbone, CN | 19,304 | 23 low |
| 3 | AS4134 | No.31,Jin-rong Street | 17,166 | 14 low |
| 4 | AS396982 | GOOGLE-CLOUD-PLATFORM, US | 14,666 | 39 medium |
| 5 | AS16509 | Amazon.com, Inc. | 10,226 | 27 medium |
| 6 | AS41676 | JMDI ORG-JJM1-RIPE, PL | 8,899 | 100 critical |
| 7 | AS44692 | DOMTEL-PL-AS, PL | 8,621 | 100 critical |
| 8 | AS8075 | MICROSOFT-CORP-MSN-AS-BLOCK, US | 8,332 | 49 medium |
| 9 | AS26548 | PUREVOLTAGE-INC, US | 7,413 | 86 critical |
| 10 | AS47329 | WDM-AS, PL | 6,649 | 96 critical |
| 11 | AS45102 | ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN | 5,808 | 30 medium |
| 12 | AS43420 | ELTRONIK-AS, PL | 5,677 | 100 critical |
| 13 | AS14061 | DigitalOcean, LLC | 5,672 | 9 low |
| 14 | AS41931 | EURONET-AS, PL | 5,357 | 67 high |
| 15 | AS50467 | BESKID-MEDIA-AS, PL | 5,273 | 67 high |
| 16 | AS50188 | KOLNET, PL | 5,207 | 67 high |
| 17 | AS198401 | GECKONET-AS, PL | 5,198 | 100 critical |
| 18 | AS13335 | CLOUDFLARENET, US | 4,982 | 35 medium |
| 19 | AS33923 | ART-COM, PL | 4,934 | 100 critical |
| 20 | AS14618 | Amazon.com, Inc. | 3,857 | 33 medium |
Weekly digest — by email
A short Monday-morning email summarising the headline movements: brute-force trend, the ASN league table, the noisiest categories, and the IPs propagating fastest across the sensor estate. Opt in, unsubscribe with one click.
Embeddable badge
Drop this badge into your blog or status page — it always shows the live count: