Shadowserver uses cookies to gather analytics. This allows us to measure how the site is used and improve the experience for our users. For more information about cookies and how Shadowserver uses them, see our privacy policy. We need your consent to use cookies in this way on your device.
Attack statistics
Attacking devices
About this data
Information about the attacking devices is obtained through our IoT device fingerprinting scans. When an IP is then seen attacking our honeypot sensors or darknet (aka. "network telescope") systems we check it against the latest scan results for that IP and infer the device make-and-model. Please note that this assessment is not necessarily 100% accurate due to device churn and port forwarding (multiple device types responding on different ports). It may also be a device behind that device IP that is actually infected or used for attacks (NAT).