Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 1 times. Targeted ports: 29030. Country: Colombia.
Observed 4 times. Targeted ports: 445. Country: Taiwan.
Observed 13 times. Targeted ports: 51749. Country: United States.
Observed 1 times. Targeted ports: 27911. Country: Brazil. Reputation: known attacker.
Observed 51 times. Targeted ports: 445. Country: Taiwan. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 19. Country: Germany.
Observed 1 times. Targeted ports: 33648. Country: Brazil.
Observed 28 times. Targeted ports: 445. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 6 times. Targeted ports: 8807. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 58014. Country: Norway. Reputation: known attacker.
Observed 8 times. Targeted ports: 8082. Country: China.
Observed 7 times. Targeted ports: 8082. Country: China.
Observed 10 times. Targeted ports: 8082. Country: China.
Observed 5 times. Targeted ports: 8082. Country: China.
Observed 9 times. Targeted ports: 16020. Country: United States.
Observed 9 times. Targeted ports: 16020. Country: United States.
Observed 10 times. Targeted ports: 16020. Country: United States.
Observed 10 times. Targeted ports: 16020. Country: United States.
Observed 9 times. Targeted ports: 16010. Country: United States.
Observed 8 times. Targeted ports: 16010. Country: United States.
Observed 8 times. Targeted ports: 16010. Country: United States.
Observed 9 times. Targeted ports: 16010. Country: United States.
Observed 5 times. Targeted ports: 25. Country: South Africa.
Observed 28 times. Targeted ports: 2222. Country: United States.
Observed 23 times. Targeted ports: 445. Country: Taiwan. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 3 times. Targeted ports: 143. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 41359. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 32473. Country: United States.
Observed 9 times. Targeted ports: 5985. Country: China. Reputation: known attacker.
Observed 7 times. Targeted ports: 5985. Country: China.
Observed 6 times. Targeted ports: 5985. Country: China.
Observed 10 times. Targeted ports: 5985. Country: China.
Observed 5 times. Targeted ports: 5985. Country: China.
Observed 1 times. Targeted ports: 61290. Country: Brazil.
Observed 11 times. Targeted ports: 6379. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 13 times. Targeted ports: 6379. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 148 times. Targeted ports: 5555. Country: Iceland.
Observed 1 times. Targeted ports: 45700. Country: Türkiye.
Observed 23 times. Targeted ports: 445. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 17788.
Observed 1 times. Targeted ports: 27015. Country: China.
Observed 37 times. Targeted ports: 9200. Country: United States.
Observed 5 times. Targeted ports: 9200. Country: United States. Reputation: mass scanner.
Observed 8417 times. Targeted ports: 80, 443, 808, 999, 1050, 1051, 1052, 1053, 1054, 1055, 1056, 1057, 1058, 1059, 1060, 1061, 1062, 1063, 1064, 1065, 1066, 1067, 1068, 1069, 1070, 1071, 1072, 1073, 1074, 1075, 1076, 1077, 1078, 1079, 1080, 1081, 1082, 1234, 2022, 2083, 2105, 2361, 2759, 2885, 3125, 3128, 3129, 3134, 3135, 3137, 3141, 3143, 3147, 3149, 3154, 3155, 3156, 3157, 3159, 3160, 3161, 3162, 3163, 3164, 3165, 3166, 3167, 3169, 3170, 3171, 3172, 3173, 3174, 3176, 3178, 3179, 3180, 3181, 3182, 3183, 3184, 3185, 3186, 3211, 3212, 3214, 3216, 3217, 3218, 3219, 3220, 3222, 3227, 3229, 3230, 3231, 3232, 3233, 3234, 3235, 3237, 3238, 3239, 3240, 3241, 3242, 3243, 3244, 3245, 3246, 3247, 3248, 3249, 3250, 3264, 3266, 3267, 3268, 3269, 3270, 3272, 3273, 3277, 4003, 4403, 4673, 4750, 5002, 5101, 5102, 5430, 5699, 5700, 5701, 5702, 5703, 5704, 5705, 5706, 5707, 5708, 5709, 5710, 5711, 5712, 5713, 5714, 5715, 5716, 5717, 5718, 5719, 5720, 5721, 5722, 5723, 5724, 5725, 5726, 5727, 5728, 5729, 5730, 5732, 5733, 5737, 5739, 5818, 5831, 5835, 5893, 5977, 6002, 6011, 6027, 6091, 6106, 6114, 6127, 6131, 6158, 6161, 6207, 6247, 6251, 6349, 6425, 6451, 6499, 6507, 6547, 6588, 6615, 6633, 6645, 6647, 6667, 6668, 6733, 6851, 6961, 7415, 7497, 7890, 8010, 8060, 8080, 8081, 8086, 8118, 8282, 8561, 8845, 8888, 8899, 9000, 9007, 9009, 9010, 9011, 9012, 9016, 9017, 9018, 9019, 9022, 9024, 9025, 9027, 9032, 9033, 9034, 9035, 9037, 9041, 9047, 9049, 9050, 9060, 9066, 9071, 9072, 9073, 9076, 9077, 9079, 9080, 9083, 9090, 9091, 9098, 9099, 9101, 9102, 9103, 9104, 9105, 9106, 9108, 9110, 9403, 9991, 9999, 10808, 10809, 20100, 20101, 20102, 20103, 20104, 20105, 20106, 20107, 20108, 20109, 20110, 20111, 20112, 20113, 20114, 20115, 20116, 20117, 20118, 20119, 20120, 20121, 20122, 20123, 20124, 20125, 20126, 20127, 20128, 20129, 20130, 31280, 55443. Country: Vietnam.
Observed 8 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 27015. Country: India.
Observed 22 times. Targeted ports: 2323. Country: India.
Observed 17 times. Targeted ports: 6443. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 12081. Country: France.
Observed 5 times. Targeted ports: 8888. Country: United States.
Observed 6 times. Targeted ports: 23. Country: Mexico.
Observed 1 times. Targeted ports: 21359. Country: Pakistan.
Observed 182 times. Targeted ports: 2323. Country: Pakistan.
Observed 112 times. Targeted ports: 4891. Country: Germany.
Observed 1 times. Targeted ports: 49105. Country: Brazil.
Observed 803 times. Targeted ports: 443. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 3 times. Targeted ports: 20. Country: China.
Observed 5 times. Targeted ports: 1434. Country: United States. Reputation: known attacker.
Observed 18 times. Targeted ports: 2404. Country: United States.
Observed 8 times. Targeted ports: 8100. Country: China.
Observed 7 times. Targeted ports: 8100. Country: China.
Observed 8 times. Targeted ports: 8100. Country: China.
Observed 1 times. Targeted ports: 42206. Country: Spain.
Observed 1 times. Targeted ports: 9754. Country: Spain.
Observed 1 times. Targeted ports: 49503. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 4 times. Targeted ports: 27017. Country: Canada.
Observed 2 times. Targeted ports: 1433. Country: China.
Observed 20 times. Targeted ports: 22. Country: The Netherlands. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA Applayer Mismatch protocol both directions.
Observed 6 times. Targeted ports: 5986. Country: Canada. Reputation: known attacker.
Observed 8 times. Targeted ports: 23. Country: Taiwan.
Observed 9 times. Targeted ports: 8545. Country: The Netherlands.
Observed 1 times. Targeted ports: 443. Country: China.
Observed 14 times. Targeted ports: 25568. Country: India.
Observed 6 times. Targeted ports: 443. Country: United States.
Observed 1 times. Targeted ports: 52889. Country: Argentina.
Observed 1 times. Targeted ports: 51638. Country: Colombia. Reputation: known attacker.
Observed 1 times. Targeted ports: 56831. Country: Peru.
Observed 1 times. Targeted ports: 11700. Country: United States.
Observed 6 times. Targeted ports: 2086. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 25593. Country: The Netherlands.
Observed 1 times. Country: United States.
Observed 5 times. Targeted ports: 6001. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 32603. Country: United States.
Observed 4 times. Targeted ports: 23. Country: Pakistan.
Observed 8 times. Targeted ports: 23. Country: Brazil.
Observed 2 times. Targeted ports: 1433. Country: United States. Reputation: known attacker.
Observed 1 times. Country: United Arab Emirates.
Observed 6 times. Targeted ports: 9042. Country: United States. Reputation: known attacker.
Observed 3 times. Targeted ports: 444. Country: United States.
Observed 9 times. Targeted ports: 8545. Country: The Netherlands.
Observed 94 times. Targeted ports: 5985. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 53. Country: China.
Observed 1 times. Targeted ports: 28766. Country: Brazil.
Observed 6 times. Targeted ports: 2323. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 443. Country: Burkina Faso. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA QUIC error on data.
Observed 9 times. Targeted ports: 5008. Country: China.
Observed 9 times. Targeted ports: 5008. Country: China.
Observed 1 times. Targeted ports: 55191. Country: Mexico.
Observed 1 times. Targeted ports: 15867. Country: Brazil.