Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 3 times. Targeted ports: 135. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 18824. Country: Brazil.
Observed 91 times. Targeted ports: 3000. Country: United States.
Observed 20 times. Targeted ports: 8009. Country: United States. Reputation: known attacker.
Observed 21 times. Targeted ports: 1028. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 45416. Country: Bangladesh.
Observed 21 times. Targeted ports: 3351. Country: United States.
Observed 7 times. Targeted ports: 8098. Country: China.
Observed 10 times. Targeted ports: 8098. Country: China. Reputation: known attacker.
Observed 7 times. Targeted ports: 8098. Country: China.
Observed 5 times. Targeted ports: 8098. Country: China.
Observed 23 times. Targeted ports: 445. Country: North Macedonia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 16582. Country: Peru.
Observed 6 times. Targeted ports: 23. Country: Canada.
Observed 25 times. Targeted ports: 6036, 17000. Country: Thailand.
Observed 245 times. Targeted ports: 7676. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 40905. Country: Brazil.
Observed 1 times. Targeted ports: 62330. Country: Brazil.
Observed 29 times. Targeted ports: 22. Country: China. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 15 times. Targeted ports: 23. Country: China. Usernames: admin.
Observed 26 times. Targeted ports: 8086. Country: United States.
Observed 1 times. Targeted ports: 52769. Country: China.
Observed 9 times. Targeted ports: 23. Country: Vietnam.
Observed 35 times. Targeted ports: 58000. Country: United States.
Observed 1 times. Targeted ports: 5432. Country: United States.
Observed 1 times. Targeted ports: 41960. Country: Canada.
Observed 4 times. Targeted ports: 9007. Country: The Netherlands. Reputation: known attacker.
Observed 5 times. Targeted ports: 7676. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 3128. Country: United States.
Observed 1 times. Targeted ports: 20574. Country: France.
Observed 1 times. Targeted ports: 42961. Country: Japan.
Observed 3 times. Targeted ports: 6667. Country: United States.
Observed 1 times. Targeted ports: 53119. Country: South Africa.
Observed 9 times. Targeted ports: 23. Country: India.
Observed 1 times. Targeted ports: 55974. Country: United Kingdom.
Observed 1 times. Targeted ports: 60184. Country: Greece.
Observed 1 times. Targeted ports: 45001. Country: Brazil.
Observed 5 times. Targeted ports: 443. Country: United Kingdom. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 18 times. Targeted ports: 443. Country: United States.
Observed 5 times. Targeted ports: 22. Country: United Kingdom.
Observed 1 times. Targeted ports: 57473. Country: Brazil.
Observed 1 times. Targeted ports: 60403. Country: Brazil. Reputation: known attacker.
Observed 31 times. Targeted ports: 80. Country: United States.
Observed 1 times. Targeted ports: 19704. Country: Brazil.
Observed 1 times. Targeted ports: 15728. Country: United States.
Observed 11 times. Targeted ports: 443. Country: United States.
Observed 79 times. Targeted ports: 8443. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 5 times. Targeted ports: 3389. Country: United Kingdom.
Observed 30 times. Targeted ports: 44300. Country: Singapore. Reputation: known attacker.
Observed 29 times. Targeted ports: 5061. Country: Poland.
Observed 1 times. Targeted ports: 5680. Country: South Africa.
Observed 1 times. Targeted ports: 15024. Country: India.
Observed 1 times. Targeted ports: 18598. Country: Brazil.
Observed 13 times. Targeted ports: 4899. Country: Russia.
Observed 1 times. Targeted ports: 36906. Country: Brazil.
Observed 1 times. Targeted ports: 39424. Country: Bolivia. Reputation: known attacker.
Observed 1 times. Targeted ports: 18996. Country: Colombia.
Observed 24 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 7 times. Targeted ports: 30015. Country: China.
Observed 8 times. Targeted ports: 30015. Country: China.
Observed 7 times. Targeted ports: 30015. Country: China.
Observed 5 times. Targeted ports: 30015. Country: China.
Observed 1 times. Targeted ports: 31805. Country: Brazil.
Observed 7 times. Targeted ports: 23. Country: China.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 37215. Country: Argentina.
Observed 1 times. Targeted ports: 48108. Country: Ecuador.
Observed 1 times. Targeted ports: 26520. Country: Brazil.
Observed 3 times. Targeted ports: 1433. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 37543. Country: Brazil.
Observed 4 times. Targeted ports: 3005. Country: Portugal.
Observed 1 times. Targeted ports: 1900. Country: China.
Observed 7 times. Targeted ports: 1212. Country: China.
Observed 8 times. Targeted ports: 1212. Country: China.
Observed 7 times. Targeted ports: 1212. Country: China.
Observed 5 times. Targeted ports: 1212. Country: China.
Observed 7 times. Targeted ports: 22222. Country: China. Reputation: known attacker.
Observed 1378 times. Targeted ports: 21, 22, 23, 25, 53, 70, 80, 81, 88, 93, 97, 102, 104, 110, 113, 119, 135, 137, 143, 221, 285, 311, 443, 444, 445, 465, 502, 503, 556, 587, 593, 666, 873, 902, 990, 992, 993, 995, 1024, 1029, 1080, 1110, 1337, 1433, 1443, 1447, 1521, 1801, 1925, 1935, 2022, 2031, 2077, 2081, 2087, 2095, 2096, 2181, 2222, 2345, 2379, 2404, 2443, 2455, 2525, 2599, 3000, 3050, 3128, 3306, 3307, 3389, 3531, 3689, 3702, 4063, 4085, 4282, 4343, 4443, 4444, 4445, 4449, 4477, 4664, 4782, 4949, 5000, 5001, 5060, 5090, 5120, 5235, 5237, 5256, 5271, 5432, 5433, 5435, 5446, 5544, 5601, 5620, 5671, 5672, 5683, 5800, 5801, 5900, 5901, 5903, 5906, 5908, 5910, 5917, 5938, 5984, 5997, 6006, 6060, 6066, 6379, 6380, 6440, 6501, 6606, 6697, 7001, 7002, 7022, 7079, 7086, 7171, 7415, 7443, 7547, 7548, 7657, 7676, 7707, 7773, 8000, 8001, 8002, 8008, 8009, 8010, 8011, 8015, 8020, 8023, 8080, 8081, 8082, 8087, 8088, 8090, 8091, 8096, 8098, 8104, 8123, 8188, 8203, 8222, 8333, 8383, 8443, 8453, 8454, 8455, 8500, 8502, 8525, 8562, 8566, 8599, 8606, 8686, 8702, 8705, 8708, 8731, 8800, 8808, 8888, 8899, 9000, 9013, 9055, 9065, 9072, 9098, 9114, 9124, 9128, 9143, 9148, 9151, 9160, 9162, 9165, 9181, 9184, 9191, 9193, 9196, 9306, 9350, 9410, 9443, 9633, 9803, 9901, 9998, 9999, 10000, 10002, 10050, 10081, 10100, 10250, 10443, 10533, 10554, 10934, 10935, 11000, 11110, 11211, 11401, 11602, 12323, 12443, 14130, 14873, 14896, 14900, 15001, 15151, 16992, 20070, 20107, 20600, 21002, 22103, 22222, 22556, 24808, 27017, 28015, 28017, 29842, 30050, 30110, 30113, 30120, 30443, 31337, 31444, 32101, 32303, 35000, 40000, 40056, 40443, 41337, 44305, 44345, 50000, 50011, 50050, 50443, 50805, 51000, 51106, 52230, 55554, 60000, 60001, 61234, 62865. Country: Romania.
Observed 7446 times. Targeted ports: 3389. Country: Russia.
Observed 43 times. Targeted ports: 5194, 8194, 8367, 8398, 8430, 10487, 10831, 12448, 14440, 27441, 53853. Country: Bulgaria. Reputation: known attacker.
Observed 8 times. Targeted ports: 8188. Country: China.
Observed 229 times. Targeted ports: 23. Country: United States.
Observed 250 times. Targeted ports: 9443. Country: Canada. Reputation: known attacker.
Observed 10 times. Targeted ports: 3000, 3002. Country: France.
Observed 20 times. Targeted ports: 5269. Country: United States. Reputation: known attacker.
Observed 30 times. Targeted ports: 2404, 8001. Country: The Netherlands.
Observed 13 times. Targeted ports: 17000. Country: Thailand.
Observed 22 times. Targeted ports: 8581. Country: United States.
Observed 6 times. Targeted ports: 2049. Country: Belgium.
Observed 4 times. Targeted ports: 2049. Country: Canada.
Observed 214 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 63171. Country: Brazil.
Observed 117 times. Targeted ports: 7574, 8883. Country: United States.
Observed 2 times. Targeted ports: 1434. Country: Brazil. Reputation: known attacker.
Observed 20 times. Targeted ports: 80. Country: Singapore.
Observed 22 times. Targeted ports: 27017. Country: Belgium.
Observed 5 times. Targeted ports: 7657. Country: Germany. Reputation: known attacker.
Observed 4 times. Targeted ports: 27017. Country: South Korea.
Observed 27 times. Targeted ports: 4782. Country: United States.
Observed 3 times. Targeted ports: 139. Country: United States. Reputation: known attacker.