← Back to feeds
IOCFREE Searchable

Honeypot infrastructure watch

A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.

488,541
Indicators
IOC
Feed type
9/21/2026
Latest indicator
Open
Access
honeypothistorical
Free

This community feed is publicly available for research.

Open this feed in app
Publisher
UQC4BL9h…w4tDk7
@hookgab

IOC feed · 488,541 indicators

Community
View researchers
Wallet-based publisher identity

Latest indicators

Live indicator delivery for this feed.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 5443. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 39 times. Targeted ports: 443. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 37249. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 10 times. Targeted ports: 8081. Country: United States.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 23665. Country: Mexico.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 23. Country: United Kingdom.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 9001. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 18464. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 2222. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Vietnam.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 90 times. Targeted ports: 23. Country: Pakistan.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 28 times. Targeted ports: 8808. Country: The Netherlands.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 16 times. Targeted ports: 999, 3128. Country: Australia.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 10874. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 2000. Country: United States.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 31455. Country: Brazil. Reputation: known attacker.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 32932. Country: France.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 13 times. Targeted ports: 8333. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 14075. Country: Morocco.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 11366. Country: Colombia.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 8545. Country: Germany.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 24 times. Targeted ports: 445. Country: Tunisia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 14 times. Targeted ports: 80. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP Request excessive header repetition.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 3389. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 4 times. Targeted ports: 2121. Country: Germany.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 2 times. Targeted ports: 443. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 27 times. Targeted ports: 5552. Country: India.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 42 times. Targeted ports: 10080. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 120 times. Targeted ports: 443. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 80. Country: United States.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 63625. Country: France.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 443. Country: United Kingdom.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 5356. Country: China.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 63364. Country: Azerbaijan.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 2375. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 23 times. Targeted ports: 445. Country: Brazil. Reputation: known attacker. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 23. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 23. Country: India.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 23. Country: Russia.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 41200. Country: Brazil. Reputation: known attacker.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Country: Oman.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 5938. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 23. Country: Ukraine.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 59876. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 26 times. Targeted ports: 2086. Country: United States. Reputation: known attacker. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 2376. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 10449. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 28 times. Targeted ports: 8084. Country: Canada.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 23 times. Targeted ports: 445. Country: Kazakhstan. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 10449. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 9 times. Targeted ports: 10449. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 10449. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 23 times. Targeted ports: 445. Country: Mexico. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 31492. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 23. Country: Vietnam.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 24 times. Targeted ports: 23. Country: United States. Reputation: mass scanner.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 23. Country: Brazil. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 18789. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 25 times. Targeted ports: 8888. Country: United States.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 22332. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 13 times. Targeted ports: 8443. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 2 times. Targeted ports: 443. Country: Ecuador. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 9080. Country: United States.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 43142. Country: Indonesia.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 13 times. Targeted ports: 23. Country: Singapore. Reputation: known attacker. Usernames: admin.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 63 times. Targeted ports: 1080. Country: Indonesia. Usernames: 111.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 26939. Country: Brazil.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Country: United Arab Emirates.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 2 times. Targeted ports: 1433. Country: The Netherlands.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 14 times. Targeted ports: 23. Country: Sweden. Reputation: known attacker. Usernames: admin.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 42926. Country: Australia.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 9 times. Targeted ports: 2222. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 9 times. Targeted ports: 12345. Country: France. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 12345. Country: France.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 28549. Country: France.

Last observed Jul 26, 2026First observed Jul 25, 2026Source: tpot-honeypot

Observed 794 times. Targeted ports: 23. Country: The Netherlands. Reputation: known attacker. Usernames: admin, daemon, default, ftp, guest and 11 more.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 13 times. Targeted ports: 23. Country: Sweden.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 1414. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 24 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 29 times. Targeted ports: 1224. Country: United States.

Last observed Jul 26, 2026First observed Jul 25, 2026Source: tpot-honeypot

Observed 81 times. Targeted ports: 1883, 5671, 5984, 6379, 8087, 9200, 9201, 9202, 9301, 10086, 11211, 15672, 27017, 27018, 27019. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 8545. Country: The Netherlands.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 8545. Country: The Netherlands.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 8545. Country: The Netherlands.

Last observed Jul 26, 2026First observed Jul 25, 2026Source: tpot-honeypot

Observed 62 times. Targeted ports: 25, 80, 110, 443, 445, 465, 995, 6443, 8000, 8080, 10250, 18789, 20000. Country: Germany. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 15 times. Targeted ports: 6066. Country: United States. Reputation: known attacker.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 46142. Country: Brazil.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 8545. Country: Canada.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 10 times. Targeted ports: 8545. Country: Canada.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 4 times. Targeted ports: 23. Country: Pakistan.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 17 times. Targeted ports: 445, 1433. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

Last observed Jul 26, 2026Source: tpot-honeypot

Observed 1 times. Targeted ports: 42023. Country: Brazil. Reputation: known attacker.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 2083. Country: United States.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 10202. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 7 times. Targeted ports: 10202. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 22. Country: United Kingdom.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 8 times. Targeted ports: 10202. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 6 times. Targeted ports: 10202. Country: China.

Last observed Jul 26, 2026First observed Jul 26, 2026Source: tpot-honeypot

Observed 5 times. Targeted ports: 22. Country: China.