Live threat observatory
Real attacker activity captured by our honeypot network. IPs masked for privacy: this is the data the platform uses to build scenarios.
LIVE ยท latest event: 18 Sept, 10:4642.058
Captured events
1032
Events last 7 days
2994
Unique IPs detected
โ๏ธ Attack types
๐ Source countries
๐ Top attackers
| IP | Country | Events | Last seen |
|---|---|---|---|
| 185.246.128.xxx | 4911 | 18 Sept, 08:55 | |
| 179.43.133.xxx | 3081 | 18 Sept, 09:01 | |
| 179.43.139.xxx | 1982 | 18 Sept, 09:11 | |
| 176.53.159.xxx | 1332 | 18 Sept, 10:46 | |
| 103.149.197.xxx | 977 | 05 Aug, 06:10 | |
| 109.160.32.xxx | 415 | 12 Sept, 08:10 | |
| 27.71.230.xxx | 304 | 03 Aug, 18:50 | |
| 91.92.42.xxx | 297 | 28 Aug, 18:50 |
โก Recent activity
10:46
176.53.159.xxxTurkeyLogin attempt
10:03
129.222.203.xxxColombiaLogin attempt
10:03
129.222.203.xxxColombiaLogin attempt
10:03
129.222.203.xxxColombiaLogin attempt
09:17
35.205.96.xxxBelgiumLogin attempt
09:11
179.43.139.xxxSwitzerlandReverse tunnel
09:11
179.43.139.xxxSwitzerlandReverse tunnel
09:11
179.43.139.xxxSwitzerlandLogin attempt
09:01
179.43.133.xxxSwitzerlandReverse tunnel
09:01
179.43.133.xxxSwitzerlandReverse tunnel
09:01
179.43.133.xxxSwitzerlandLogin attempt
08:55
185.246.128.xxxSwedenReverse tunnel
This is the real material you train with
Every scenario on the platform is inspired by attacks like these. Create your free account and practice incident response on real data.
Start training โ