Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 5 times. Targeted ports: 6080. Country: United States.
Observed 28 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 6754. Country: Brazil.
Observed 7 times. Targeted ports: 23. Country: Indonesia.
Observed 1 times. Targeted ports: 2258. Country: Brazil.
Observed 66 times. Targeted ports: 7170. Country: United States.
Observed 2 times. Country: China.
Observed 5 times. Targeted ports: 3000. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 38065. Country: Mexico. Reputation: known attacker.
Observed 1 times. Targeted ports: 12166. Country: Brazil.
Observed 9 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 39330. Country: Uzbekistan.
Observed 1 times. Targeted ports: 46660. Country: Brazil.
Observed 19 times. Targeted ports: 3080, 3160. Country: United States.
Observed 28 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 26 times. Targeted ports: 7707. Country: United States.
Observed 1 times. Targeted ports: 54226. Country: Brazil.
Observed 3 times. Targeted ports: 993. Country: United States.
Observed 3 times. Targeted ports: 1433. Country: India.
Observed 2 times. Targeted ports: 1433. Country: Brazil. Reputation: known attacker.
Observed 6 times. Targeted ports: 7000. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 49495. Country: Brazil.
Observed 28 times. Targeted ports: 6666. Country: United States.
Observed 29 times. Targeted ports: 445. Country: Vietnam. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 38176. Country: Mexico.
Observed 649 times. Targeted ports: 3300, 3301, 3302, 3303, 3304, 3305, 3306, 3307, 3308, 3309, 3310, 3311, 3312, 3313, 3314, 3315, 3316, 3317, 3318, 3319, 3320, 3321, 3322, 3323, 3324, 3325, 3326, 3327, 3328, 3329, 3330, 3331, 3332, 3333, 3334, 3335, 3336, 3337, 3338, 3339, 3340, 3341, 3342, 3343, 3344, 3345, 3346, 3347, 3348, 3349, 3350, 3351, 3352, 3353, 3354, 3355, 3356, 3357, 3358, 3359, 3360, 3361, 3362, 3363, 3364, 3365, 3366, 3367, 3368, 3369, 3370, 3371, 3372, 3373, 3374, 3375, 3376, 3377, 3378, 3379, 3380, 3381, 3382, 3383, 3384, 3385, 3386, 3387, 3388, 3389, 3390, 3391, 3392, 3393, 3394, 3395, 3396, 3397, 3398, 3399, 3400. Country: United States.
Observed 1 times. Targeted ports: 7802. Country: Australia. Reputation: known attacker.
Observed 1 times. Targeted ports: 23274. Country: Tunisia.
Observed 1 times. Targeted ports: 57009. Country: Brazil.
Observed 7 times. Targeted ports: 5342. Country: China.
Observed 10 times. Targeted ports: 5342. Country: China.
Observed 1 times. Targeted ports: 56860. Country: Mexico.
Observed 8 times. Targeted ports: 5342. Country: China.
Observed 5 times. Targeted ports: 5342. Country: China.
Observed 1 times. Targeted ports: 45891. Country: Brazil. Reputation: known attacker.
Observed 2 times. Targeted ports: 7782, 39591. Country: Argentina. Reputation: known attacker.
Observed 1 times. Targeted ports: 19042. Country: Venezuela.
Observed 36 times. Targeted ports: 445. Country: Kyrgyzstan. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 12187. Country: China.
Observed 1 times. Targeted ports: 11897. Country: Brazil.
Observed 1 times. Targeted ports: 5683. Country: Singapore.
Observed 1 times. Targeted ports: 3040. Country: Brazil.
Observed 3 times. Targeted ports: 1433. Country: Indonesia.
Observed 1 times. Targeted ports: 12515. Country: Russia. Reputation: known attacker.
Observed 1 times. Targeted ports: 37788. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Georgia.
Observed 1 times. Targeted ports: 20023. Country: India.
Observed 1 times. Targeted ports: 37135. Country: Uzbekistan. Reputation: known attacker.
Observed 8 times. Targeted ports: 8545. Country: The Netherlands.
Observed 2 times. Country: China.
Observed 12 times. Targeted ports: 53. Country: Belgium.
Observed 1 times. Targeted ports: 28354. Country: Brazil.
Observed 28 times. Targeted ports: 445. Country: Bangladesh. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 3 times. Targeted ports: 5900. Country: United States.
Observed 111 times. Targeted ports: 2525. Country: Germany.
Observed 1 times. Targeted ports: 29817. Country: China.
Observed 556 times. Targeted ports: 53, 80, 81, 82, 83, 84, 85, 88, 89, 90, 161, 162, 443, 631, 1080, 1194, 1234, 1443, 1883, 1884, 1900, 2080, 2123, 2222, 2443, 3000, 3001, 3002, 3003, 3004, 3080, 4000, 4001, 4002, 4040, 4080, 4200, 4443, 4444, 4453, 4567, 4568, 4848, 5000, 5001, 5002, 5003, 5080, 5081, 5543, 5544, 5555, 5601, 5683, 6000, 6443, 7443, 7700, 7777, 7800, 7900, 8000, 8001, 8002, 8006, 8008, 8051, 8069, 8080, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8090, 8091, 8095, 8096, 8097, 8098, 8099, 8100, 8123, 8161, 8181, 8200, 8281, 8383, 8400, 8443, 8444, 8445, 8484, 8500, 8600, 8686, 8700, 8787, 8800, 8844, 8888, 8900, 9000, 9001, 9002, 9090, 9100, 9200, 9300, 9443, 9444, 9445, 9500, 9600, 9999, 10000, 10001, 10443, 11000, 11443, 12345, 12443, 13443, 14443, 15672, 18080, 20000, 20080, 28080, 30000, 38080, 40000, 48080, 50000, 58080, 60000, 65535. Country: India.
Observed 5 times. Targeted ports: 29798. Country: Vietnam. Reputation: known attacker.
Observed 1 times. Targeted ports: 18880. Country: Madagascar.
Observed 5 times. Targeted ports: 23. Country: South Korea.
Observed 9 times. Targeted ports: 10000. Country: Finland.
Observed 9 times. Targeted ports: 23. Country: Azerbaijan.
Observed 1 times. Targeted ports: 50049. Country: Brazil.
Observed 5 times. Targeted ports: 80. Country: United States.
Observed 7 times. Targeted ports: 2323. Country: China. Reputation: known attacker.
Observed 62 times. Targeted ports: 8883. Country: United States.
Observed 8 times. Targeted ports: 8545. Country: Canada.
Observed 9 times. Targeted ports: 8545. Country: Canada.
Observed 3 times. Targeted ports: 520. Country: United States. Reputation: known attacker.
Observed 28 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 7 times. Targeted ports: 23. Country: Uzbekistan.
Observed 1 times. Targeted ports: 22109. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 62249. Country: Brazil.
Observed 1 times. Targeted ports: 5367. Country: Brazil.
Observed 1 times. Targeted ports: 53668. Country: Brazil.
Observed 1 times. Targeted ports: 34554. Country: India.
Observed 1 times. Targeted ports: 2892. Country: Brazil.
Observed 1 times. Targeted ports: 39490. Country: Spain. Reputation: known attacker.
Observed 6 times. Targeted ports: 5671. Country: United States.
Observed 29 times. Targeted ports: 21, 9943. Country: Belgium. Usernames: anonymous.
Observed 6 times. Targeted ports: 3388. Country: United States.
Observed 6 times. Targeted ports: 7001. Country: United States.
Observed 1 times. Targeted ports: 51486. Country: Morocco.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 5 times. Targeted ports: 636. Country: Belgium.
Observed 5 times. Targeted ports: 7681. Country: United States. Alert categories: Misc activity. Signatures: GPL ICMP Destination Unreachable Communication with Destination Host is Administratively Prohibited.
Observed 1 times. Targeted ports: 3667. Country: U.S. Virgin Islands.
Observed 2 times. Targeted ports: 69. Country: United Kingdom. Reputation: known attacker.
Observed 27 times. Targeted ports: 8086. Country: United States.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 15085. Country: Kenya.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 363 times. Targeted ports: 5900, 5904, 5906, 5908, 5912, 5917, 5918, 5921, 5924, 5925, 5928, 5929, 5932, 5934, 5937, 5938, 5941, 5942, 5943, 5944, 5945, 5949, 5951, 5952, 5954, 5957, 5960, 5961, 5962, 5964, 5965, 5966, 5968, 5971, 5974, 5976, 5979, 5982, 5985, 5988, 5989, 5990, 5996, 6005, 6008, 6020, 6021, 6100, 6102, 6161, 6262, 6443, 6512, 6633, 9999, 10000, 10001, 10134. Country: United Kingdom. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 39042. Country: Brazil.
Observed 253 times. Targeted ports: 23. Country: Belgium. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions. Usernames: ; � admin.$cmd �� hello �? .
Observed 7 times. Targeted ports: 23. Country: Chile.
Observed 1 times. Targeted ports: 3290. Country: Brazil.
Observed 1 times. Targeted ports: 45173. Country: Argentina.
Observed 94 times. Targeted ports: 3389. Country: Finland.
Observed 48 times. Targeted ports: 25. Country: Belgium. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.