We run honeypots that get probed by the internet all day. Everything they see is searchable here, 90 days back. Type an IP and see what it's been up to.
No IP to hand? See what's been probing us right now or browse the lookup landing.
-
events total
-
24h
-
unique IPs / 24h
-
countries / 24h
-
top port / 24h
-
top country / 24h
24h · click to filter
24h · click for full report
24h · click for full report
24h · rDNS · click to filter
24h · click to filter
24h · click to filter
24h · click to filter
24h · click to filter
free · no authGET /lookup/<ip>
Any public IPv4. Returns HTML in browsers, JSON for curl / wget / explicit Accept header, or append ?format=json.
curl https://honeylabs.net/lookup/<ip>Rate limited to 30 requests per minute per source IP. No account.
AI agents · MCPPOST /mcp
Streamable HTTP transport. Seven tools covering attacker enrichment, fingerprint search, payload search, and time-series.
claude mcp add honeylabs \
--transport http \
https://mcp.honeylabs.net/mcp \
--header "Authorization: Bearer <key>"Free tier: 100 queries/day. Pro: 10k/day with 90-day history. Get a key from the dashboard.
HTTP · JSON-RPC 2.0POST /mcp
Skip the MCP client. POST a JSON-RPC envelope, get an SSE response back. Same bearer auth as the MCP tab.
curl -X POST https://mcp.honeylabs.net/mcp \
-H "Authorization: Bearer <key>" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'Use tools/list to enumerate, tools/call to invoke. Standard MCP wire format.
Top sources our honeypots logged in the past 7 days. Click any IP for the full report.
191.80.228.236119,862 events
Argentina· Telefonica de Argentina
SMTP
213.209.159.21929,504 events
Taiwan· Feo Prest SRL
1554713179253771137065484
94.102.49.15515,437 events
Netherlands· IP Volume inc
9955541264359MSSQLOracle
80.82.77.20215,324 events
Netherlands· IP Volume inc
Oracle99556501MySQL2715
160.119.76.6010,861 events
Seychelles· Alsycon B.V.
14400426814785123899
138.68.16.2419,618 events
United States· DigitalOcean, LLC
4185644029491624795945410
157.245.71.1939,552 events
Netherlands· DigitalOcean, LLC
4713248660488854772447869
134.199.215.1109,122 events
United States· DigitalOcean, LLC
4877848919434454793540154
64.227.12.619,046 events
United States· DigitalOcean, LLC
4639741125472144517140290
185.91.127.858,756 events
Germany· Tube-Hosting
2280811111HTTPS108081045
85.11.167.117,948 events
Bulgaria· ColocaTel Inc.
54355434543315432Postgres
212.56.53.187,392 events
United States· Krypt Technologies
13338713038325
193.32.162.286,586 events
Romania· Unmanaged Ltd
300620007000808310000
200.118.80.726,525 events
Colombia· Telmex Colombia S.A.
SMB
192.253.248.1806,322 events
Iran· Limited Network LTD
110004545422111310016001
160.119.76.545,808 events
Seychelles· Alsycon B.V.
91012238958704124335389
92.63.197.224,810 events
Ukraine· FOP Dmytro Nedilskyi
56338389323210013301
64.227.186.1234,700 events
India· DigitalOcean, LLC
3819654809249449222185
176.120.22.1794,160 events
Russia· Proton66 OOO
144331059114309114958380
152.32.170.553,789 events
Hong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
3798123103427230003736
162.243.213.1953,780 events
United States· DigitalOcean, LLC
81FTPSSHHTTP82
152.32.189.1213,762 events
Hong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
106641103850736486723
152.32.189.1283,676 events
Hong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
13714HTTPS1097450272650
5.61.209.2243,622 events
Seychelles· Amarutu Technology Ltd
2301127912782069Docker
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。