Threats

Most active IPs and networks.

Last 24h Last 7 days Last 30 days
Total probes — all time
4,428,683
Top IP — all time
80.94.95.185
181,257 probes · SS-Net
Top ASN — all time
AS398101
637,260 probes · GoDaddy.com, LLC
Top country — all time
🇺🇸 United States (US)
1,459,183 probes
Most active IPs — Last 24h
# IP Country Org Events
1 80.94.92.128 RO Unmanaged Ltd 622
2 112.46.214.62 CN China Mobile Communications Group Co., Ltd. 328
3 112.46.212.103 CN China Mobile Communications Group Co., Ltd. 281
4 176.53.159.197 TR ZORNTECH WEB SOLUTIONS 240
5 176.53.159.198 TR ZORNTECH WEB SOLUTIONS 240
6 112.46.213.95 CN China Mobile Communications Group Co., Ltd. 229
7 95.86.207.240 RU Rostelecom 224
8 31.220.3.165 DE Amarutu Technology Ltd 185
9 2.57.122.53 RO Unmanaged Ltd 136
10 77.91.71.92 RU Alferov Aleksey Aleksandrovich 133
11 219.155.134.34 CN CHINA UNICOM China169 Backbone 112
12 121.40.119.125 CN Hangzhou Alibaba Advertising Co.,Ltd. 101
13 195.178.110.227 BG Techoff Srv Limited 101
14 94.154.43.196 NL Storm Industries LLC 85
15 92.118.39.71 US Unmanaged Ltd 73
16 112.5.89.227 CN China Mobile Communications Group Co., Ltd. 70
17 117.72.121.35 CN China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch 67
18 108.165.95.17 US Nodestop LLC 63
19 222.97.112.179 KR Korea Telecom 62
20 45.56.120.20 US Akamai Connected Cloud 59
Most active ASNs — Last 24h
# ASN Organization Events
1 AS47890 Unmanaged Ltd 1,051
2 AS9808 China Mobile Communications Group Co., Ltd. 909
3 AS154383 ZORNTECH WEB SOLUTIONS 480
4 AS14061 DigitalOcean, LLC 277
5 AS13118 Rostelecom 224
6 AS206264 Amarutu Technology Ltd 204
7 AS4766 Korea Telecom 188
8 AS4837 CHINA UNICOM China169 Backbone 160
9 AS9541 Cyber Internet Services (Pvt) Ltd. 134
10 AS63949 Akamai Connected Cloud 134
11 AS211486 Alferov Aleksey Aleksandrovich 133
12 AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 117
13 AS48090 Techoff Srv Limited 113
14 AS396982 Google LLC 109
15 AS219502 Storm Industries LLC 94
16 AS8075 Microsoft Corporation 81
17 AS137409 GSL Networks Pty LTD 81
18 AS398324 Censys, Inc. 74
19 AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. 71
20 AS141679 China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch 67
⚡ Active flooding — IPs with ≥10 events in the last hour
# IP Country ASN Organization Events / hour
1 92.118.39.77 US AS47890 Unmanaged Ltd 34
2 80.94.92.128 RO AS47890 Unmanaged Ltd 26
3 2.57.122.238 RO AS47890 Unmanaged Ltd 15
4 95.86.207.240 RU AS13118 Rostelecom 11
5 176.53.159.197 TR AS154383 ZORNTECH WEB SOLUTIONS 10
6 176.53.159.198 TR AS154383 ZORNTECH WEB SOLUTIONS 10
🔀 Multi-facade sources — IPs probing multiple honeypot services, last 24h
# IP Facades Facade count Total events
1 157.230.140.57 fake-http,fake-https,fake-ssh 3 41
2 45.79.195.112 fake-http,fake-https,fake-telnet 3 36
3 24.199.82.67 fake-http,fake-https,fake-telnet 3 35
4 137.184.102.106 fake-mysql,fake-postgres,fake-redis 3 26
5 45.56.120.20 fake-http,fake-https,fake-ssh 3 20
6 18.218.118.203 fake-http,fake-https,fake-redis 3 9
7 134.122.117.196 fake-mysql,fake-redis 2 22
8 62.210.142.166 fake-ssh,fake-telnet 2 20
9 20.221.59.215 fake-http,fake-https 2 14
10 35.189.254.248 fake-mysql,fake-postgres 2 13
11 3.129.187.38 fake-mysql,fake-ssh 2 9
12 45.148.10.171 fake-http,fake-https 2 8
13 179.43.150.26 fake-postgres,fake-redis 2 6
14 64.62.156.52 fake-ssh,fake-telnet 2 6
15 172.239.117.68 fake-http,fake-https 2 4
16 185.196.220.132 fake-http,fake-https 2 4
17 188.129.83.157 fake-ssh,fake-telnet 2 4
18 200.83.109.165 fake-ssh,fake-telnet 2 4
19 24.175.252.30 fake-ssh,fake-telnet 2 4
20 34.140.3.155 fake-http,fake-https 2 4
21 74.138.107.209 fake-ssh,fake-telnet 2 4
22 80.94.92.65 fake-http,fake-https 2 4
23 89.109.48.49 fake-ssh,fake-telnet 2 4
24 94.154.43.203 fake-http,fake-https 2 4
25 134.236.15.240 fake-ssh,fake-telnet 2 3
26 148.227.75.190 fake-ssh,fake-telnet 2 3
27 18.116.101.220 fake-postgres,fake-ssh 2 3
28 190.48.148.48 fake-ssh,fake-telnet 2 3
29 192.253.209.104 fake-http,fake-https 2 3
30 24.6.116.202 fake-ssh,fake-telnet 2 3
31 43.138.5.244 fake-http,fake-https 2 3
32 45.238.183.2 fake-ssh,fake-telnet 2 3
33 104.206.128.66 fake-redis,fake-ssh 2 2
34 105.154.16.162 fake-ssh,fake-telnet 2 2
35 13.59.14.240 fake-http,fake-https 2 2
36 188.0.17.87 fake-ssh,fake-telnet 2 2
37 192.253.209.72 fake-http,fake-https 2 2
38 210.187.168.8 fake-ssh,fake-telnet 2 2
39 210.187.171.139 fake-ssh,fake-telnet 2 2
40 45.195.25.146 fake-ssh,fake-telnet 2 2
41 84.54.72.86 fake-ssh,fake-telnet 2 2