Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 434,232 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 9553. Country: France. Reputation: mass scanner.
Observed 2 times. Targeted ports: 523. Country: United Kingdom. Reputation: known attacker.
Observed 5 times. Targeted ports: 5901. Country: South Korea.
Observed 4 times. Targeted ports: 46636. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 1047. Country: France. Reputation: mass scanner.
Observed 5 times. Targeted ports: 1900. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 59910. Country: United States. Reputation: known attacker.
Observed 20 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 4 times. Targeted ports: 37653. Country: Bulgaria.
Observed 1 times. Targeted ports: 12746. Country: United States. Reputation: known attacker.
Observed 7 times. Targeted ports: 1047. Country: France. Reputation: mass scanner.
Observed 2 times. Targeted ports: 623. Country: United States.
Observed 4 times. Targeted ports: 24003. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 39398. Country: Bulgaria. Alert categories: Misc activity. Signatures: GPL ICMP Destination Unreachable Communication with Destination Host is Administratively Prohibited.
Observed 8 times. Targeted ports: 3301. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 4314. Country: United States. Reputation: mass scanner.
Observed 6 times. Targeted ports: 61516. Country: United States. Reputation: known attacker.
Observed 7 times. Targeted ports: 14000. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 3976. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 4314. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 9804. Country: France. Reputation: mass scanner.
Observed 4 times. Targeted ports: 61516. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 14000. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 46195. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 9804. Country: France. Reputation: mass scanner.
Observed 6 times. Targeted ports: 9629. Country: France. Reputation: mass scanner.
Observed 1 times. Targeted ports: 427. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 20118. Country: United Kingdom. Reputation: known attacker.
Observed 4 times. Targeted ports: 11014. Country: United Kingdom.
Observed 5 times. Targeted ports: 10261. Country: France. Reputation: mass scanner.
Observed 5 times. Targeted ports: 4406. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 27019. Country: United States.
Observed 6 times. Targeted ports: 48440. Country: Bulgaria.
Observed 1 times. Targeted ports: 12246. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 10010. Country: Bulgaria. Reputation: known attacker.
Observed 203 times. Targeted ports: 4312, 4618, 8297, 12160, 13586, 14110, 14452, 16854, 18280, 18921, 25677, 28146, 28250, 29287, 30835, 31518, 31531, 32104, 42672, 43432, 45670, 47558, 48590, 48603, 50829, 55358, 55413, 55414, 55536, 59651, 61371. Country: Canada. Reputation: known attacker.
Observed 4 times. Targeted ports: 8265. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 9444. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 43900. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 13978. Country: United Kingdom. Reputation: known attacker.
Observed 1 times. Targeted ports: 64836. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 4786. Country: Russia.
Observed 7 times. Targeted ports: 4335. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 2872. Country: United States. Reputation: mass scanner.
Observed 3 times. Targeted ports: 3336. Country: United States.
Observed 4 times. Targeted ports: 6001. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 25565. Country: China. Reputation: known attacker.
Observed 14 times. Targeted ports: 6001. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 5001. Country: United States. Reputation: known attacker.
Observed 3 times. Targeted ports: 3988. Country: Bulgaria.
Observed 11 times. Targeted ports: 22. Country: Romania. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: xumm.
Observed 4 times. Targeted ports: 6001. Country: United States. Reputation: mass scanner.
Observed 8 times. Targeted ports: 80. Country: United Arab Emirates. Reputation: known attacker.
Observed 4 times. Targeted ports: 9629. Country: France. Reputation: mass scanner.
Observed 4 times. Targeted ports: 47099. Country: United States.
Observed 4 times. Targeted ports: 80, 443, 554, 8080. Country: United States.
Observed 5 times. Targeted ports: 1047. Country: France. Reputation: mass scanner.
Observed 2 times. Targeted ports: 139. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 1087. Country: France. Reputation: mass scanner.
Observed 6 times. Targeted ports: 9553. Country: France. Reputation: mass scanner.
Observed 14 times. Targeted ports: 5678. Country: United States. Reputation: known attacker.
Observed 7 times. Targeted ports: 1087. Country: France. Reputation: mass scanner.
Observed 1 times. Targeted ports: 161. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 9663. Country: France. Reputation: mass scanner.
Observed 4 times. Targeted ports: 5237. Country: Bulgaria. Reputation: known attacker.
Observed 5 times. Targeted ports: 4314. Country: United States. Reputation: mass scanner.
Observed 13 times. Targeted ports: 22. Country: Romania. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: admin.
Observed 20 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 1433. Country: China. Reputation: known attacker.
Observed 10 times. Targeted ports: 9935. Country: United States. Reputation: known attacker.
Observed 27 times. Targeted ports: 5599. Country: Malaysia. Reputation: known attacker.
Observed 5 times. Targeted ports: 3301. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 3283. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 19070. Country: Brazil. Reputation: known attacker.
Observed 3 times. Targeted ports: 3389. Country: Romania. Reputation: known attacker.
Observed 6 times. Targeted ports: 23456. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 4007. Country: Brazil.
Observed 4 times. Targeted ports: 21058. Country: United States. Reputation: known attacker.
Observed 15 times. Targeted ports: 2404. Country: United States. Reputation: bot, crawler.
Observed 5 times. Targeted ports: 4335. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 3389. Country: Bulgaria.
Observed 9 times. Targeted ports: 22. Country: Japan. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 4 times. Targeted ports: 5905. Country: The Netherlands.
Observed 4 times. Targeted ports: 9093. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 22. Country: Italy.
Observed 116 times. Targeted ports: 9922, 10214, 10325, 22640, 22708, 23091, 23214, 23329, 23506, 23731, 37250, 37310, 37768, 51572, 51585, 52267, 52828. Country: Canada. Reputation: known attacker.
Observed 4 times. Targeted ports: 23456. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 1900. Country: United States. Reputation: mass scanner.
Observed 2 times. Targeted ports: 6379. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 59578. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 6173. Country: Bulgaria. Reputation: known attacker.
Observed 4 times. Targeted ports: 7473. Country: United States.
Observed 4 times. Targeted ports: 4899. Country: France. Reputation: mass scanner.
Observed 79 times. Targeted ports: 9976, 22933, 37085, 37140, 37195, 37713, 37938, 51975, 52200, 52322, 52439, 52719. Country: Canada. Reputation: known attacker.
Observed 12 times. Targeted ports: 4899. Country: France. Reputation: mass scanner. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction, SURICATA TLS invalid record type.
Observed 2 times. Targeted ports: 444. Country: The Netherlands. Reputation: mass scanner.
Observed 1 times. Targeted ports: 12846. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 2222. Country: Germany. Reputation: known attacker.
Observed 20 times. Targeted ports: 992. Country: United States. Reputation: known attacker.