Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 16993. Country: China.
Observed 1 times. Targeted ports: 28824. Country: Norway.
Observed 2 times. Country: China.
Observed 6 times. Targeted ports: 8118. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 64271. Country: Brazil.
Observed 33 times. Targeted ports: 8000, 11434. Country: China.
Observed 8 times. Targeted ports: 6665. Country: China.
Observed 10 times. Targeted ports: 6665. Country: China.
Observed 8 times. Targeted ports: 6665. Country: China. Reputation: known attacker.
Observed 8 times. Targeted ports: 6665. Country: China.
Observed 5 times. Targeted ports: 6665. Country: China.
Observed 260 times. Targeted ports: 8103. Country: United States.
Observed 6 times. Targeted ports: 80. Country: United States.
Observed 259 times. Targeted ports: 5001. Country: United States.
Observed 25 times. Targeted ports: 8009. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 29 times. Targeted ports: 445. Country: China. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 12 times. Targeted ports: 80. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP Request excessive header repetition.
Observed 3 times. Targeted ports: 995. Country: United States. Reputation: known attacker.
Observed 24 times. Targeted ports: 445. Country: United States. Reputation: known attacker. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 10001. Country: China.
Observed 1 times. Targeted ports: 60702. Country: Brazil.
Observed 1 times. Targeted ports: 55091. Country: Mexico.
Observed 2 times. Targeted ports: 873. Country: Hong Kong.
Observed 1 times. Targeted ports: 27015. Country: China.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 51 times. Targeted ports: 3128, 8080, 22249, 29840, 29842. Country: Germany. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).
Observed 16 times. Targeted ports: 11434. Country: India.
Observed 1 times. Targeted ports: 33915. Country: Colombia.
Observed 1 times. Targeted ports: 46740. Country: Canada.
Observed 1 times. Targeted ports: 17977. Country: Brazil. Reputation: known attacker.
Observed 6 times. Targeted ports: 8103. Country: United Kingdom.
Observed 3 times. Targeted ports: 69. Country: United States. Reputation: known attacker.
Observed 22 times. Targeted ports: 9990. Country: United States.
Observed 1 times. Targeted ports: 33471. Country: France.
Observed 7 times. Targeted ports: 3389. Country: Iran.
Observed 1 times. Targeted ports: 8080. Country: Romania.
Observed 1 times. Targeted ports: 6327. Country: Morocco.
Observed 7 times. Targeted ports: 60022. Country: China.
Observed 3 times. Targeted ports: 5060. Country: United States. Reputation: known attacker.
Observed 13 times. Targeted ports: 9443. Country: United States.
Observed 1 times. Targeted ports: 6677. Country: Algeria.
Observed 154 times. Targeted ports: 443. Country: United States.
Observed 11 times. Targeted ports: 443. Country: The Netherlands.
Observed 5 times. Targeted ports: 443. Country: United Arab Emirates.
Observed 118 times. Targeted ports: 443. Country: United States.
Observed 113 times. Targeted ports: 443. Country: The Netherlands.
Observed 17 times. Targeted ports: 443. Country: United Arab Emirates.
Observed 203 times. Targeted ports: 443. Country: United States.
Observed 5 times. Targeted ports: 443. Country: Spain.
Observed 11 times. Targeted ports: 443. Country: United States.
Observed 137 times. Targeted ports: 443. Country: Japan.
Observed 173 times. Targeted ports: 443. Country: Germany.
Observed 138 times. Targeted ports: 443. Country: Germany.
Observed 5 times. Targeted ports: 443. Country: Germany.
Observed 131 times. Targeted ports: 443. Country: Singapore.
Observed 155 times. Targeted ports: 443. Country: United States.
Observed 125 times. Targeted ports: 443. Country: Germany.
Observed 168 times. Targeted ports: 443. Country: United States.
Observed 2094 times. Targeted ports: 443. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM 3way handshake SYN resend different seq on SYN recv.
Observed 2187 times. Targeted ports: 443. Country: The Netherlands.
Observed 5 times. Targeted ports: 443. Country: United States.
Observed 29 times. Targeted ports: 443. Country: The Netherlands.
Observed 11 times. Targeted ports: 443. Country: United States.
Observed 162 times. Targeted ports: 443. Country: United States.
Observed 621 times. Targeted ports: 443. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM 3way handshake SYN resend different seq on SYN recv.
Observed 5 times. Targeted ports: 443. Country: United States.
Observed 155 times. Targeted ports: 443. Country: Lithuania.
Observed 179 times. Targeted ports: 443. Country: The Netherlands.
Observed 12 times. Targeted ports: 443. Country: Singapore.
Observed 139 times. Targeted ports: 443. Country: Germany.
Observed 162 times. Targeted ports: 443. Country: United States.
Observed 17 times. Targeted ports: 443. Country: United States.
Observed 5 times. Targeted ports: 443. Country: United Arab Emirates.
Observed 5 times. Targeted ports: 443. Country: Australia.
Observed 17 times. Targeted ports: 443. Country: Spain.
Observed 112 times. Targeted ports: 443. Country: Australia.
Observed 131 times. Targeted ports: 443. Country: Lithuania.
Observed 149 times. Targeted ports: 443. Country: United Arab Emirates.
Observed 5 times. Targeted ports: 443. Country: Brazil.
Observed 5 times. Targeted ports: 443. Country: United States.
Observed 5 times. Targeted ports: 443. Country: United States.
Observed 5 times. Targeted ports: 443. Country: Brazil.
Observed 11 times. Targeted ports: 443. Country: Singapore.
Observed 11 times. Targeted ports: 443. Country: Germany.
Observed 29 times. Targeted ports: 443. Country: United States.
Observed 126 times. Targeted ports: 443. Country: Singapore.
Observed 148 times. Targeted ports: 443. Country: United States.
Observed 132 times. Targeted ports: 443. Country: Singapore.
Observed 150 times. Targeted ports: 443. Country: United Arab Emirates.
Observed 156 times. Targeted ports: 443. Country: The Netherlands.
Observed 155 times. Targeted ports: 443. Country: Australia.
Observed 162 times. Targeted ports: 443. Country: Germany.
Observed 154 times. Targeted ports: 443. Country: The Netherlands.
Observed 174 times. Targeted ports: 443. Country: United States.
Observed 143 times. Targeted ports: 443. Country: United States.
Observed 192 times. Targeted ports: 443. Country: United Kingdom.
Observed 114 times. Targeted ports: 443. Country: United Kingdom.
Observed 5 times. Targeted ports: 443. Country: United States.