Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 14 times. Targeted ports: 23. Country: Pakistan.
Observed 6 times. Targeted ports: 23. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 23922. Country: Brazil.
Observed 23 times. Targeted ports: 5903. Country: Türkiye.
Observed 5 times. Targeted ports: 5985. Country: France.
Observed 1 times. Targeted ports: 55069. Country: Brazil. Reputation: known attacker.
Observed 6 times. Targeted ports: 23. Country: Nepal.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 2828. Country: Chile.
Observed 7 times. Targeted ports: 18789. Country: Japan.
Observed 6 times. Targeted ports: 445. Country: China.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 15 times. Targeted ports: 23. Country: China.
Observed 24 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 33306. Country: Ireland.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 79 times. Targeted ports: 22. Country: France. Reputation: known attacker.
Observed 26 times. Targeted ports: 7777. Country: Canada.
Observed 37 times. Targeted ports: 443, 5984. Country: United States.
Observed 9 times. Targeted ports: 16000. Country: China.
Observed 8 times. Targeted ports: 16000. Country: China.
Observed 7 times. Targeted ports: 16000. Country: China.
Observed 6 times. Targeted ports: 16000. Country: China. Reputation: known attacker.
Observed 11 times. Targeted ports: 16000. Country: China.
Observed 15 times. Targeted ports: 80. Country: Singapore. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP Request excessive header repetition.
Observed 20 times. Targeted ports: 4096. Country: Germany.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 8 times. Targeted ports: 3268. Country: United States.
Observed 143 times. Targeted ports: 22, 443, 465, 993, 995. Country: Taiwan. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 1 times. Targeted ports: 47237. Country: Mexico. Reputation: known attacker.
Observed 26 times. Targeted ports: 3000. Country: Canada.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 57500. Country: Bangladesh.
Observed 1 times. Targeted ports: 49572. Country: Taiwan. Reputation: known attacker.
Observed 296 times. Targeted ports: 4145, 8000, 8003, 8094, 8100, 8265, 18184, 18210. Country: United States.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 27073. Country: Peru. Reputation: known attacker.
Observed 59 times. Targeted ports: 22. Country: France. Reputation: known attacker.
Observed 1 times. Targeted ports: 44533. Country: Bangladesh.
Observed 1 times. Targeted ports: 57380. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 9 times. Targeted ports: 23. Country: Brazil.
Observed 560 times. Targeted ports: 3306, 27017. Country: Belgium. Usernames: root.
Observed 163 times. Targeted ports: 80, 3000, 3001, 4000, 8000, 8080, 42336, 43027, 43102, 43265, 44371, 45342, 45685, 47398, 48032, 48672, 50968, 51479, 52722, 52848, 52947. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 24 times. Targeted ports: 3790. Country: United States.
Observed 13 times. Targeted ports: 8883. Country: United States.
Observed 2 times. Targeted ports: 990. Country: South Korea.
Observed 1 times. Targeted ports: 43830. Country: Colombia.
Observed 1 times. Targeted ports: 1434. Country: United States. Reputation: mass scanner.
Observed 13 times. Targeted ports: 110, 143. Country: Belgium.
Observed 9 times. Targeted ports: 23. Country: Tunisia.
Observed 1 times. Targeted ports: 28556. Country: Ukraine.
Observed 9 times. Targeted ports: 443, 8080. Country: Germany.
Observed 61 times. Targeted ports: 22. Country: France. Reputation: known attacker.
Observed 1 times. Targeted ports: 16003. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 257 times. Targeted ports: 6379. Country: Belgium. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 77 times. Targeted ports: 22. Country: France. Reputation: known attacker.
Observed 4514 times. Targeted ports: 443. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 28 times. Targeted ports: 8082. Country: United States.
Observed 3 times. Targeted ports: 11211. Country: China.
Observed 1 times. Targeted ports: 31887. Country: Brazil.
Observed 1 times. Targeted ports: 137. Country: Japan.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Country: United States.
Observed 1 times. Targeted ports: 23618. Country: Guadeloupe.
Observed 8 times. Targeted ports: 23. Country: Brazil.
Observed 94 times. Targeted ports: 22. Country: France. Reputation: known attacker.
Observed 12 times. Targeted ports: 4000. Country: Russia. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 8 times. Targeted ports: 7687. Country: China.
Observed 26 times. Targeted ports: 33333. Country: United States.
Observed 26 times. Targeted ports: 7173. Country: United States.
Observed 10 times. Targeted ports: 7687. Country: China.
Observed 7 times. Targeted ports: 7687. Country: China.
Observed 2 times. Targeted ports: 41912. Country: Mexico. Reputation: known attacker.
Observed 1 times. Targeted ports: 60701. Country: Mexico.
Observed 1 times. Targeted ports: 24349. Country: Brazil.
Observed 2 times. Targeted ports: 1433. Country: Colombia.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 27 times. Targeted ports: 8880. Country: United States.
Observed 25 times. Targeted ports: 445. Country: Brazil. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 12109. Country: Brazil.
Observed 23 times. Targeted ports: 18190, 19009. Country: Malaysia.
Observed 1 times. Targeted ports: 5807. Country: France.
Observed 1 times. Targeted ports: 33589. Country: Morocco.
Observed 1 times. Targeted ports: 19521. Country: Brazil. Reputation: known attacker.
Observed 262 times. Targeted ports: 1291. Country: United States.
Observed 8 times. Targeted ports: 5060. Country: France.
Observed 16 times. Targeted ports: 110. Country: Belgium.
Observed 6 times. Targeted ports: 23. Country: Brazil.
Observed 97 times. Targeted ports: 8888. Country: Argentina.
Observed 8 times. Targeted ports: 23. Country: Spain.
Observed 29 times. Targeted ports: 4444. Country: Canada. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 32 times. Targeted ports: 3306. Country: Belgium.