Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 5 times. Targeted ports: 990. Country: Belgium.
Observed 1 times. Targeted ports: 7172. Country: France.
Observed 5 times. Targeted ports: 23. Country: Taiwan.
Observed 18 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Country: United Kingdom.
Observed 1 times. Targeted ports: 17870. Country: South Africa.
Observed 6 times. Targeted ports: 25. Country: Belgium.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 23 times. Targeted ports: 22, 14782. Country: India. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 6 times. Targeted ports: 23. Country: Russia.
Observed 11 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 31058. Country: Brazil.
Observed 200 times. Targeted ports: 443, 1443, 2443, 3443, 4431, 4432, 4433, 4434, 4435, 4436, 4437, 4438, 4439, 4443, 5443, 6443, 7443, 8443, 9443, 10443, 44310. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 3 times. Targeted ports: 587. Country: China.
Observed 6 times. Targeted ports: 23. Country: India.
Observed 1 times. Targeted ports: 25161. Country: France. Reputation: known attacker.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 11 times. Targeted ports: 25. Country: Egypt.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 2 times. Targeted ports: 8080. Country: South Korea.
Observed 9 times. Targeted ports: 23. Country: India.
Observed 7 times. Targeted ports: 10002. Country: China. Reputation: known attacker.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 27 times. Targeted ports: 445. Country: Mexico. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 4144. Country: Brazil.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Targeted ports: 5654. Country: Italy.
Observed 5 times. Targeted ports: 23. Country: India.
Observed 1 times. Targeted ports: 38331. Country: United States.
Observed 7 times. Targeted ports: 23. Country: China.
Observed 9 times. Targeted ports: 23. Country: Ukraine.
Observed 6 times. Targeted ports: 23. Country: Morocco.
Observed 1 times. Targeted ports: 3224. Country: United States. Reputation: known attacker.
Observed 23 times. Targeted ports: 445. Country: Syria. Reputation: known attacker. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 5808. Country: Mexico.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 11 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: Israel.
Observed 134 times. Targeted ports: 22. Country: Vietnam. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM CLOSEWAIT FIN out of window, SURICATA STREAM spurious retransmission. Usernames: anton, bin, joro, root.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 29 times. Targeted ports: 445. Country: Ukraine. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 398 times. Targeted ports: 22. Country: Vietnam. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM spurious retransmission. Usernames: admin, belkinstyle, btf, george, guest and 13 more.
Observed 1 times. Targeted ports: 19236. Country: Indonesia. Reputation: known attacker.
Observed 15 times. Targeted ports: 22, 23. Country: Argentina.
Observed 6 times. Targeted ports: 23. Country: Indonesia.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 23 times. Targeted ports: 445. Country: Ukraine. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 8 times. Targeted ports: 23. Country: India.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 5 times. Targeted ports: 23. Country: Uzbekistan.
Observed 6 times. Targeted ports: 23. Country: Indonesia.
Observed 8 times. Targeted ports: 445. Country: Vietnam. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 58324. Country: China.
Observed 8 times. Targeted ports: 23. Country: Brazil.
Observed 64 times. Targeted ports: 1883. Country: United States.
Observed 8 times. Targeted ports: 23. Country: Chile.
Observed 6 times. Targeted ports: 23. Country: Chile.
Observed 8 times. Targeted ports: 7443. Country: China.
Observed 8 times. Targeted ports: 7443. Country: China.
Observed 10 times. Targeted ports: 7443. Country: China.
Observed 5 times. Targeted ports: 7443. Country: China.
Observed 230 times. Targeted ports: 22. Country: Vietnam. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM CLOSEWAIT FIN out of window, SURICATA STREAM spurious retransmission. Usernames: admin, config, ftp, guest1, rebecca and 7 more.
Observed 8 times. Targeted ports: 22. Country: Ukraine.
Observed 7 times. Targeted ports: 23. Country: Russia.
Observed 5 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 33945. Country: Brazil.
Observed 11 times. Targeted ports: 23. Country: Brazil.
Observed 9 times. Targeted ports: 23. Country: Panama.
Observed 2 times. Targeted ports: 443. Country: France.
Observed 4 times. Targeted ports: 5060. Country: United Kingdom.
Observed 3 times. Targeted ports: 1433. Country: Vietnam.
Observed 6 times. Targeted ports: 445. Country: Vietnam.
Observed 1 times. Targeted ports: 20204. Country: Kazakhstan. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Japan.
Observed 9 times. Targeted ports: 23. Country: Russia.
Observed 23 times. Targeted ports: 445. Country: Georgia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 6 times. Targeted ports: 23. Country: South Korea.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 8. Country: Mexico.
Observed 8 times. Targeted ports: 23. Country: Ireland.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 5 times. Targeted ports: 23. Country: Argentina.
Observed 6 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 48020. Country: Indonesia.
Observed 24 times. Targeted ports: 445. Country: Nepal. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 10926. Country: Brazil. Reputation: known attacker.
Observed 29 times. Targeted ports: 12120. Country: Germany.
Observed 32 times. Targeted ports: 22, 23. Country: Mexico.
Observed 8 times. Targeted ports: 23. Country: Colombia.
Observed 10 times. Targeted ports: 8188. Country: United Kingdom. Reputation: known attacker.
Observed 1 times. Targeted ports: 4687. Country: Brazil.
Observed 1 times. Targeted ports: 48674. Country: Brazil.
Observed 93 times. Targeted ports: 22. Country: Belgium. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 6 times. Targeted ports: 23. Country: Chile.