We gratefully acknowledge IPinfo.io for their generous support of academic research by providing free access to their comprehensive IP geolocation and intelligence data.

Traffic Report for rynzs (US, San Jose)

Linux | 0.89 GB | hosting

Page loaded: 2026-02-06 20:49:59 UTC

Actionable Threat Intelligence

Firewall IP Blocklists
Choose Your Blocklist Strategy

Three different blocklist options are available based on your security requirements and tolerance for false positives.

Recommended
LightScope Network Power

Harnesses the power of the entire LightScope network! Contains IPs that connected to honeypots across ALL LightScope endpoints.

  • 🌐 Network-wide threat intelligence
  • ✓ 100% verified genuine attackers
  • ✓ No spoofed IP addresses
  • ✓ Maximum protection coverage
Best Choice: Leverages the collective intelligence of the entire LightScope network. Safe for immediate deployment.
Download Recommended
Conservative
Endpoint-Specific Verified

Only includes IPs that completed a 3-way TCP handshake with THIS endpoint's honeypot services. These are verified genuine threat actors specific to your endpoint.

  • ✓ Endpoint-specific targeting
  • ✓ Zero spoofing risk
  • ✓ Safe for production
  • ✓ Targeted protection
Good Choice: For endpoint-specific protection. These IPs specifically targeted your infrastructure.
Download Conservative
Extreme (Not Recommended)
All Threat Actor IPs

Includes ALL individual threat actor IPs that targeted your network, including those that may be spoofed by competitors or other attackers.

  • 🚨 HIGH spoofing probability
  • ⚠️ WILL LIKELY block legitimate traffic
  • ⚠️ Can cause service disruption
  • ⚠️ NOT RECOMMENDED
Not Recommended: High risk of blocking legitimate services. Only for isolated environments.
Download Extreme
Firewall Import Instructions:
pfSense/OPNsense:
Firewall → Aliases → IP → Upload
Cisco ASA:
object-group network BLOCKLIST
iptables:
ipset create blocklist hash:ip
Format:
Plain text, one IP per line

Automate your blocklist updates! Use these wget commands to automatically download the latest blocklists for integration into scripts, cron jobs, or automated security workflows.

Recommended (Network-wide)
wget -O recommended_blocklist.txt \
  "https://lightscope.isi.edu/blocklist/20251004_pesszaxsjsanedtmkihqycumjrdaihwegcrtytwlpnrynzs/recommended"
Conservative (Endpoint-specific)
wget -O conservative_blocklist.txt \
  "https://lightscope.isi.edu/blocklist/20251004_pesszaxsjsanedtmkihqycumjrdaihwegcrtytwlpnrynzs/conservative"
Extreme (Not Recommended)
wget -O extreme_blocklist.txt \
  "https://lightscope.isi.edu/blocklist/20251004_pesszaxsjsanedtmkihqycumjrdaihwegcrtytwlpnrynzs/extreme"
Example Automation Script:
#!/bin/bash
# Download latest LightScope blocklist
wget -q -O /tmp/blocklist.txt \
  "https://lightscope.isi.edu/blocklist/20251004_pesszaxsjsanedtmkihqycumjrdaihwegcrtytwlpnrynzs/recommended"

# Apply to iptables
ipset flush lightscope_blocklist
while read ip; do
  ipset add lightscope_blocklist $ip
done < /tmp/blocklist.txt
Cron Job Example:
# Update blocklist every hour
0 * * * * /usr/local/bin/update_blocklist.sh

# Update blocklist daily at 2 AM
0 2 * * * wget -q -O /etc/firewall/blocklist.txt \
  "https://lightscope.isi.edu/blocklist/20251004_pesszaxsjsanedtmkihqycumjrdaihwegcrtytwlpnrynzs/recommended" \
  && /usr/local/bin/reload_firewall.sh
Pro Tip: Set up automated downloads to keep your firewall protection current. The blocklists are updated whenever new dashboard data is processed, ensuring you have the latest threat intelligence.
Internal Threats
None detected
No unwanted traffic from internal IP addresses
Changes To Targeted Ports
No major changes detected
No port changes above 300%
Overall Traffic Trends
Normal Level
-41.3% change (7-day)
Current: 243,630
Previous: 415,132
Status:
  • Traffic levels are within normal range
  • Continue regular monitoring
  • Review other sections for insights
How to Use This Section

This section provides immediate, actionable insights from your threat intelligence data. Red items require immediate attention, yellow items need investigation, and green items indicate normal status. Click on the detailed sections below for comprehensive analysis and remediation steps.

Honeypot Analysis

IPs Connected to Honeypot Ports On Your Machine

Loading honeypot connections data...

Incomplete Connections: Attackers Started But Didn't Complete The 3-Way Handshake To Honeypot Ports

Loading incomplete connections data...

Honeypot Port Statistics

Loading port statistics...

Attack Payloads

Loading payload analysis...

Honeypot Attack Timeline

Loading temporal analysis...

General Information

All Sources Unwanted Traffic Port Activity
Last 7 Days
Daily Unwanted Traffic Since Inception
Weekly Unwanted Traffic by Hour
Last 7 Days
Ports Targeted by Unwanted Traffic
Last 7 Days
Data Time Ranges:
  • Weekly Unwanted Traffic by Hour: Last 7 days
  • Daily Unwanted Traffic Since Inception: Complete history
  • Port Statistics: Last 7 days
Unique Threat Actors

19,718

Distinct sources of unwanted traffic

Comparative Analysis
Unwanted Traffic Rankings
70.7% Unwanted Traffic Volume Percentile

Rank 13 of 41
among active endpoints for receiving unwanted traffic

121,891
Unwanted
Packets (7d)
11,271
Threat
Sources
15320
Targeted
Ports
Unwanted Traffic Concentration

Top threat subnets generate:

Top 5% of subnets (261 subnets): 83.4%
Top 10% of subnets: 89.7%
Top 20% of subnets: 93.4%
From 5,223 total threat subnets (121,699 unwanted packets)

Internal Threats

7-Day Comparison

Traffic Volume Changes
Current Week

243,630

packets

Previous Week

415,132

packets

Change

-171,502

(-41.3%)

New Threat Actors
IP Address Hit Count Country ASN
47.100.4.222 6542 China AS37963
202.155.148.6 4842 Singapore AS47741
87.120.191.65 3906 Netherlands AS174
78.128.114.126 2269 Bulgaria AS50360
47.243.194.83 1998 Hong Kong AS45102
139.199.80.137 1785 China AS45090
185.156.73.233 1720 Netherlands AS210848
62.60.135.171 1607 Iran AS59441
80.94.95.115 1545 Romania AS204428
87.120.191.81 1143 Netherlands AS174
New Subnets
Subnet Hit Count
79.124.49.0/24 12567
Significant Activity Changes
IP Address Change Country
79.124.49.114 +79% Bulgaria
91.224.92.156 +53% Lithuania
122.179.137.151 -50% India
82.208.21.194 -28% Germany
Port Targeting Changes
New Ports Being Targeted
Port 23 (2597 hits) Port 3306 (1884 hits) Port 1080 (1470 hits) Port 6379 (887 hits) Port 445 (868 hits) Port 3000 (863 hits) Port 3128 (799 hits) Port 7999 (756 hits) Port 8000 (644 hits) Port 8081 (602 hits)
Significant Port Changes
Port Change
8080 +147%
443 +98%
80 +72%
3389 +65%
8443 +58%
2222 +47%
8728 +29%
New Geographic Sources
China (8327 hits) Singapore (4842 hits) Romania (2291 hits) Hong Kong (1998 hits) Iran (1607 hits)
Comparison Summary: This analysis compares the last 7 days with the previous 7 days (8-14 days ago). Traffic has decreased by 171,502 packets (41.3%). 10 new threat actor(s) detected. 1 new subnet(s) detected.

Threat Intelligence Analysis

Unwanted Traffic by Company/Organization
Company/Organization Packet Count Unique Sources Countries ASNs Sample IPs
Capgemini Nederland B.V. 253,545 1 Netherlands AS16074 192.113.218.205
DigitalOcean, LLC 165,701 14 Germany India United Kingdom +1 AS14061 143.198.60.26, 64.23.241.193, 134.199.196.58...
Contabo GmbH 51,775 5 Germany AS51167 82.208.21.194, 84.247.188.191, 95.111.236.206...
Tamatiya EOOD 23,652 31 Bulgaria AS50360 79.124.49.114, 78.128.114.126, 79.124.40.118...
Aliyun Computing Co., LTD 13,066 1 China AS37963 47.100.4.222
Linode 12,227 88 United States AS63949 143.42.164.97, 143.42.1.52, 143.42.164.182...
Cloud hosting 9,768 4 Lithuania AS209605 91.224.92.156, 91.224.92.121, 91.224.92.55...
Fuse Hosting Web 9,373 2 Netherlands AS174 87.120.191.65, 87.120.191.81
MEVSPACE sp. z o.o. 6,485 3 Poland AS201814 185.16.39.79, 95.214.53.196, 95.214.52.233
Google LLC 5,607 55 India Italy United Kingdom +1 AS396982 35.203.211.86, 34.93.128.179, 35.222.117.243...
Telkom Internet LTD 5,066 13 Netherlands AS210848 185.156.73.233, 92.63.197.180, 92.63.197.181...
OMAO SINGAPORE BOARDBAND 4,842 1 Singapore AS47741 202.155.148.6
Bharti Airtel Services Limited, 6th floor , Interface Building No 7, Link Road, Mumbai Maharastra-400064 4,164 1 India AS24560 122.179.137.151
NOAVARAN SHABAKEH SABZ MEHREGAN (Ltd.) 3,111 3 Iran AS59441 62.60.135.171, 62.60.135.190, 62.60.131.90
Amazon Technologies Inc. 2,869 18 United States AS16509 3.130.96.91, 3.137.73.221, 3.134.148.59...
Alibaba Cloud LLC 2,615 6 Hong Kong Singapore AS45102 47.243.194.83, 47.236.150.243, 47.236.118.237...
Dedicated Servers IP Range 2,525 11 Poland AS201814 194.180.49.105, 194.180.49.107, 194.180.49.109...
UNMANAGED LTD 2,485 3 Romania AS204428 AS47890 80.94.95.115, 80.94.95.116, 193.32.162.157
Pfcloud UG 2,436 11 Germany Netherlands AS51396 204.76.203.219, 204.76.203.212, 204.76.203.93...
Palo Alto Networks, Inc 2,029 20 Belgium Finland United States AS396982 147.185.133.137, 147.185.132.184, 147.185.133.234...
Alferov Aleksey Aleksandrovich 1,929 6 Russia Unknown 88.210.63.69, 88.210.63.191, 88.210.63.192...
Tencent cloud computing (Beijing) Co., Ltd. 1,785 1 China AS45090 139.199.80.137
Alsycon B.V. 1,708 1 Netherlands AS49870 194.50.16.198
Criminal IP Collector AiSpera 1,538 4 Netherlands AS202425 185.242.226.43, 185.242.226.42, 185.242.226.44...
Censys, Inc. 1,296 10 Germany Hong Kong United States AS398324 AS398705 +1 162.142.125.117, 167.94.138.176, 162.142.125.220...
Unwanted Traffic by Country
Country Country Code Packet Count Unique Sources Sample IPs
Netherlands NL 276,738 39 192.113.218.205, 87.120.191.65, 87.120.191.81, 185.156.73.233, 194.50.16.198
United States US 187,741 177 143.198.60.26, 64.23.241.193, 134.199.196.58, 134.199.204.151, 159.89.147.161
Germany DE 54,526 23 82.208.21.194, 185.91.127.107, 84.247.188.191, 185.73.23.133, 217.154.38.181
Bulgaria BG 25,314 38 79.124.49.114, 78.128.114.126, 79.124.40.118, 79.124.40.174, 79.124.49.226
China CN 16,973 15 47.100.4.222, 139.199.80.137, 36.105.166.131, 101.68.123.77, 223.78.151.228
Lithuania LT 10,817 6 91.224.92.156, 77.90.185.84, 91.224.92.121, 91.224.92.55, 141.98.11.140
Poland PL 9,900 16 185.16.39.79, 149.50.107.44, 95.214.53.196, 194.180.49.105, 194.180.49.107
Singapore SG 5,535 6 202.155.148.6, 103.189.235.176, 47.236.150.243, 8.219.40.63, 47.236.118.237
India IN 5,226 8 122.179.137.151, 210.212.162.132, 130.250.191.201, 34.93.128.179, 49.206.194.29
United Kingdom GB 4,219 36 157.245.32.173, 85.11.183.6, 35.203.211.86, 193.163.125.142, 35.203.210.111
Russia RU 3,537 14 88.210.63.69, 88.210.63.191, 88.210.63.192, 88.210.63.190, 178.22.24.60
Iran IR 3,385 5 62.60.135.171, 62.60.135.190, 185.213.165.211, 62.60.131.90, 185.231.113.86
Hong Kong HK 3,264 12 47.243.194.83, 8.218.167.186, 152.32.213.170, 47.239.79.234, 101.36.119.218
Romania RO 2,980 6 80.94.95.115, 80.94.95.116, 141.98.83.48, 193.32.162.157, 94.156.152.7
France FR 1,761 9 15.188.81.217, 37.59.110.4, 94.231.206.249, 62.210.136.185, 62.210.131.202
Indonesia ID 1,686 10 103.153.190.105, 103.52.114.250, 103.181.143.69, 103.226.138.52, 103.52.115.25
Finland FI 1,509 15 147.185.133.137, 147.185.133.234, 147.185.133.251, 147.185.133.149, 147.185.133.51
Vietnam VN 1,418 4 113.160.224.174, 160.250.4.167, 123.31.29.131, 27.71.28.205
Japan JP 818 5 185.244.104.2, 162.43.41.42, 118.194.230.231, 156.236.75.64, 165.154.231.252
Canada CA 782 1 103.102.230.4
South Korea KR 759 7 221.145.5.14, 203.228.30.198, 220.124.208.27, 222.108.177.110, 221.159.21.170
Brazil BR 718 5 45.238.103.198, 177.10.136.46, 177.130.248.114, 191.252.111.14, 187.62.87.27
Spain ES 609 4 46.151.178.49, 5.187.35.158, 5.187.35.21, 185.114.175.11
Turkey TR 493 4 92.249.61.124, 78.135.111.5, 151.242.30.71, 178.20.210.151
Unknown Unknown 448 1 130.12.180.82
Unwanted Traffic by Autonomous System (ASN)
ASN AS Name Packet Count Unique Sources Countries Sample IPs
AS16074 Capgemini Nederland B.V. 253,545 1 Netherlands 192.113.218.205
AS14061 DigitalOcean, LLC 165,701 14 Germany India United Kingdom +1 143.198.60.26, 64.23.241.193, 134.199.196.58...
AS51167 Contabo GmbH 51,775 5 Germany 82.208.21.194, 84.247.188.191, 95.111.236.206...
AS50360 Tamatiya EOOD 24,387 34 Bulgaria 79.124.49.114, 78.128.114.126, 79.124.40.118...
AS37963 Hangzhou Alibaba Advertising Co.,Ltd. 13,066 1 China 47.100.4.222
AS63949 Akamai Connected Cloud 12,227 88 United States 143.42.164.97, 143.42.1.52, 143.42.164.182...
AS209605 UAB Host Baltic 10,000 5 Lithuania 91.224.92.156, 91.224.92.121, 91.224.92.55...
AS201814 MEVSPACE sp. z o.o. 9,776 15 Poland 185.16.39.79, 149.50.107.44, 95.214.53.196...
AS174 Cogent Communications 9,373 2 Netherlands 87.120.191.65, 87.120.191.81
AS396982 Google LLC 7,636 75 Belgium Finland India +3 35.203.211.86, 147.185.133.137, 34.93.128.179...
Unknown Unknown 6,227 23 Austria Canada China +8 103.102.230.4, 45.156.87.74, 130.12.180.82...
AS210848 Telkom Internet LTD 5,066 13 Netherlands 185.156.73.233, 92.63.197.180, 92.63.197.181...
AS47741 TSUNAMI ELECTRIC LIMITED 4,842 1 Singapore 202.155.148.6
AS24560 Bharti Airtel Ltd., Telemedia Services 4,164 1 India 122.179.137.151
AS16509 Amazon.com, Inc. 3,785 19 France United States 15.188.81.217, 3.130.96.91, 3.137.73.221...
AS59441 Hostiran Network 3,111 3 Iran 62.60.135.171, 62.60.135.190, 62.60.131.90
AS45102 Alibaba (US) Technology Co., Ltd. 3,013 9 Hong Kong Singapore United States 47.243.194.83, 8.218.167.186, 47.236.150.243...
AS51396 Pfcloud UG 2,436 11 Germany Netherlands 204.76.203.219, 204.76.203.212, 204.76.203.93...
AS204428 SS-Net 2,293 2 Romania 80.94.95.115, 80.94.95.116
AS202425 IP Volume inc 2,070 6 Netherlands 185.242.226.43, 185.242.226.42, 185.242.226.44...
AS45090 Shenzhen Tencent Computer Systems Company Limited 1,785 1 China 139.199.80.137
AS49870 Alsycon B.V. 1,708 1 Netherlands 194.50.16.198
AS398324 Censys, Inc. 1,105 8 United States 162.142.125.117, 167.94.138.176, 162.142.125.220...
AS45899 VNPT Corp 1,068 1 Vietnam 113.160.224.174
AS213438 ColocaTel Inc. 1,000 2 Netherlands 193.142.147.209, 193.142.146.230

Global Threat Intelligence

Global Threat Trends
Network-Wide Traffic Volume
Recent 30 days
0
Previous 30 days
0
0.0% change
Unique Threat Sources
Recent 30 days
0
Previous 30 days
0
0.0% change
Top Threat Source Countries
Country Packets Sources
Top Targeted Ports Globally
Port Hit Count Sources

Individual Threat Actors

Location Information
Country:United States (US)
City:Santa Clara
Region:California
Postal Code:95054
Timezone:America/Los_Angeles
Network Information
ASN:AS14061
AS Name:DigitalOcean, LLC
Company:DigitalOcean, LLC
Domain:digitalocean.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 100% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
nqatp (65,081 hits)
Temporal Port Activity
Last 7 Days
iafdz (56,726 hits)
Temporal Port Activity
Last 7 Days
mrozu (56,705 hits)
Temporal Port Activity
Last 7 Days
alzae (56,150 hits)
Temporal Port Activity
Last 7 Days
tgcua (56,035 hits)
Temporal Port Activity
Last 7 Days
eanhc (56,022 hits)
Temporal Port Activity
Last 7 Days
ludbp (52,975 hits)
Temporal Port Activity
Last 7 Days
vqhav (33,284 hits)
Temporal Port Activity
Last 7 Days
xqtiq (26,897 hits)
Temporal Port Activity
Last 7 Days
sqepx (24,464 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:Germany (DE)
City:Düsseldorf
Region:North Rhine-Westphalia
Postal Code:40210
Timezone:Europe/Berlin
Network Information
ASN:AS51167
AS Name:Contabo GmbH
Company:Contabo GmbH
Domain:contabo.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 25% (Low Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
ludbp (46,376 hits)
Temporal Port Activity
Last 7 Days
xqtiq (867 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:United States (US)
City:Santa Clara
Region:California
Postal Code:95054
Timezone:America/Los_Angeles
Network Information
ASN:AS14061
AS Name:DigitalOcean, LLC
Company:DigitalOcean, LLC
Domain:digitalocean.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 70% (Medium Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
nqatp (47,572 hits)
Temporal Port Activity
Last 7 Days
xqtiq (43,570 hits)
Temporal Port Activity
Last 7 Days
qsjzt (34,166 hits)
Temporal Port Activity
Last 7 Days
qffay (33,981 hits)
Temporal Port Activity
Last 7 Days
deoyg (33,977 hits)
Temporal Port Activity
Last 7 Days
mrozu (33,848 hits)
Temporal Port Activity
Last 7 Days
iafdz (33,815 hits)
Temporal Port Activity
Last 7 Days
tgcua (33,425 hits)
Temporal Port Activity
Last 7 Days
vqhav (21,890 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:United States (US)
City:Lithia Springs
Region:Georgia
Postal Code:30122
Timezone:America/New_York
Network Information
ASN:AS14061
AS Name:DigitalOcean, LLC
Company:DigitalOcean, LLC
Domain:digitalocean.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 100% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
fqsso (80,174 hits)
Temporal Port Activity
Last 7 Days
nqatp (42,092 hits)
Temporal Port Activity
Last 7 Days
isxku (36,864 hits)
Temporal Port Activity
Last 7 Days
qffay (36,745 hits)
Temporal Port Activity
Last 7 Days
deoyg (36,691 hits)
Temporal Port Activity
Last 7 Days
iafdz (36,607 hits)
Temporal Port Activity
Last 7 Days
mrozu (36,546 hits)
Temporal Port Activity
Last 7 Days
eanhc (36,159 hits)
Temporal Port Activity
Last 7 Days
tgcua (36,152 hits)
Temporal Port Activity
Last 7 Days
alzae (36,137 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:Bulgaria (BG)
City:Sofia
Region:Sofia-Capital
Postal Code:1000
Timezone:Europe/Sofia
Network Information
ASN:AS50360
AS Name:Tamatiya EOOD
Company:Tamatiya EOOD
Domain:4vendeta.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 53% (Medium Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
nqatp (10,688 hits)
Temporal Port Activity
Last 7 Days
chcoy (9,811 hits)
Temporal Port Activity
Last 7 Days
vqhav (5,800 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:China (CN)
City:Shanghai
Region:Shanghai
Postal Code:200000
Timezone:Asia/Shanghai
Network Information
ASN:AS37963
AS Name:Hangzhou Alibaba Advertising Co.,Ltd.
Company:Aliyun Computing Co., LTD
Domain:alibabacloud.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 76% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
utfcd (31 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:United States (US)
City:Lithia Springs
Region:Georgia
Postal Code:30122
Timezone:America/New_York
Network Information
ASN:AS14061
AS Name:DigitalOcean, LLC
Company:DigitalOcean, LLC
Domain:digitalocean.com
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 98% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
isxku (10,914 hits)
Temporal Port Activity
Last 7 Days
deoyg (10,856 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:Lithuania (LT)
City:Kaunas
Region:Kaunas
Postal Code:44001
Timezone:Europe/Vilnius
Network Information
ASN:AS209605
AS Name:UAB Host Baltic
Company:Cloud hosting
Domain:serveroffer.lt
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 100% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
oxrwe (18,037 hits)
Temporal Port Activity
Last 7 Days
udqwh (9,029 hits)
Temporal Port Activity
Last 7 Days
nqatp (9,024 hits)
Temporal Port Activity
Last 7 Days
isxku (9,021 hits)
Temporal Port Activity
Last 7 Days
iafdz (9,017 hits)
Temporal Port Activity
Last 7 Days
xqtiq (9,017 hits)
Temporal Port Activity
Last 7 Days
tgcua (9,013 hits)
Temporal Port Activity
Last 7 Days
mrozu (9,012 hits)
Temporal Port Activity
Last 7 Days
fqsso (9,003 hits)
Temporal Port Activity
Last 7 Days
eanhc (9,002 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:Singapore (SG)
City:Singapore
Region:
Postal Code:574180
Timezone:Asia/Singapore
Network Information
ASN:AS47741
AS Name:TSUNAMI ELECTRIC LIMITED
Company:OMAO SINGAPORE BOARDBAND
Domain:omao.ee
Privacy Information
Hosting:true
Proxy:
VPN:
Tor:
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 41% (Low Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
xqtiq (797 hits)
Temporal Port Activity
Last 7 Days
tgcua (781 hits)
Temporal Port Activity
Last 7 Days
deoyg (618 hits)
Temporal Port Activity
Last 7 Days
Location Information
Country:Netherlands (NL)
City:Lelystad
Region:Flevoland
Postal Code:8224
Timezone:Europe/Amsterdam
Network Information
ASN:AS174
AS Name:Cogent Communications
Company:Fuse Hosting Web
Domain:fusehosting.net
Privacy Information
Hosting:Unknown
Proxy:Unknown
VPN:Unknown
Tor:Unknown
AbuseIPDB Information
Abuse Confidence Score: AbuseIPDB 100% (High Risk)
rynzs - Targeted Ports
Temporal Port Activity
Last 7 Days
oxrwe (15,537 hits)
Temporal Port Activity
Last 7 Days
udqwh (8,733 hits)
Temporal Port Activity
Last 7 Days
tgcua (8,452 hits)
Temporal Port Activity
Last 7 Days
mrozu (8,333 hits)
Temporal Port Activity
Last 7 Days
deoyg (7,830 hits)
Temporal Port Activity
Last 7 Days
isxku (7,771 hits)
Temporal Port Activity
Last 7 Days
qsjzt (7,718 hits)
Temporal Port Activity
Last 7 Days
alzae (7,586 hits)
Temporal Port Activity
Last 7 Days
fqsso (7,529 hits)
Temporal Port Activity
Last 7 Days
qffay (7,462 hits)
Temporal Port Activity
Last 7 Days

Subnet Analysis (/24 Networks)

Unique Subnets

10,679

Distinct /24 networks with unwanted traffic

Ports Targeted by Subnets
Last 7 Days
Subnet Temporal Port Activity
Last 7 Days
Top Subnet Offenders
IPs in Subnet
IP Address Hit Count
143.198.60.26 31,846
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
82.208.21.194 25,106
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
64.23.241.193 23,288
64.23.241.182 1
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
134.199.196.58 20,568
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
147.185.133.137 151
147.185.133.234 118
147.185.133.251 116
147.185.133.149 114
147.185.133.51 102
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
162.216.150.241 117
162.216.150.123 104
162.216.150.80 102
162.216.150.175 100
162.216.150.105 97
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
35.203.211.86 161
35.203.211.254 108
35.203.211.22 106
35.203.211.95 103
35.203.211.248 99
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
35.203.210.111 140
35.203.210.18 117
35.203.210.31 117
35.203.210.49 114
35.203.210.223 105
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
162.216.149.193 105
162.216.149.109 101
162.216.149.10 95
162.216.149.175 95
162.216.149.190 95
Ports Targeted by This Subnet
Temporal Port Activity
IPs in Subnet
IP Address Hit Count
79.124.49.114 11,208
79.124.49.226 742
79.124.49.230 353
79.124.49.58 139
79.124.49.62 125
Ports Targeted by This Subnet
Temporal Port Activity
Complete Endpoint Data Export
Download All LightScope Data For This Endpoint

Get the complete raw dataset for this endpoint in CSV format. This includes all network traffic data, timestamps, IP addresses, ports, and other collected intelligence from the lightscope_honeypot_included_data table.

  • Format: CSV (Comma-Separated Values)
  • Contents: All endpoint data ordered by most recent first
  • Use Case: Research, analysis, custom reporting, data science
  • Compatibility: Excel, Python pandas, R, SQL imports
Download All Data
CSV format
Note: This download contains the raw data used to generate all dashboard visualizations and analytics. File size depends on the amount of traffic data collected for this endpoint.