Seeing activity from watchTowr you didn't expect?

The watchTowr Platform performs automated security testing on behalf of our customers, continuously, across the parts of the Internet they have asked us to watch.

Unexpected testing usually has one of two causes. A watchTowr customer believed they held authorization from you or someone in your organization, which is the most common, so it is worth checking with whoever manages the systems involved. Or a customer mistakenly included your network in their scope.

Our network-probe source addresses are published here: https://kb.watchtowr.io/en/articles/10230510-testing-infrastructure If the activity comes from somewhere outside those ranges and hosts, it is not us, and we'd encourage you to contact the owner of those systems.

If it is us, and you believe the activity is unauthorized, tell us below. It takes about two minutes.

Next