Seeing activity from watchTowr you didn't expect?

The watchTowr Platform continuously performs automated security testing on behalf of our customers, against the systems they have asked us to watch.

Unexpected testing usually has one of two causes. Most often, a watchTowr customer believed they were authorized to test your systems, so it is worth checking with whoever manages them. Less often, a customer has mistakenly included your network in their scope.

The addresses our testing comes from are published here: https://kb.watchtowr.io/en/articles/10230510-testing-infrastructure If the activity did not come from one of those addresses, it did not come from us, and we'd encourage you to contact the owner of the systems it came from.

If the activity did come from us and you believe it was unauthorized, tell us below. It takes about two minutes.

Next