209.245.235.xiad · US30% confidenceThe Mothlight live feed is a timestamped view of requests arriving at passive honeypot sensors. Consistent with the publication delay, the public feed is delayed by at least 60 minutes and shows a rolling recent window; it is not an instant wire feed. Every record carries a provisional label and confidence score; published IPs have already passed the disclosure policy, and small or single-source cells are withheld rather than shown as zero.
The newest page refreshes every 15 seconds while visible, but the underlying public data is delayed by at least 60 minutes. Classification may change after batch reconciliation. Pause refresh to inspect records.
Public window: delayed by at least 60 minutes. Times are UTC. A label such as probe describes observed intent only; it is not a claim of exploitation or compromise.
209.245.235.xiad · US30% confidence112.158.179.xnrt · KR30% confidence202.51.211.xsin · ID15% confidence109.160.32.xams · NL30% confidence31.148.149.xams · UA30% confidence209.245.235.xiad · US30% confidence209.245.235.xiad · US30% confidence209.245.235.xiad · US30% confidence1.20.104.xsin · TH15% confidence209.245.235.xiad · US30% confidence109.160.32.xams · NL30% confidence1.20.104.xsin · TH15% confidence209.245.235.xiad · US30% confidence209.245.235.xiad · US30% confidence109.160.32.xams · NL30% confidence209.245.235.xiad · US30% confidence31.148.149.xams · UA30% confidence209.245.235.xiad · US30% confidence102.37.220.xfra · ZA15% confidence112.158.179.xnrt · KR30% confidence