Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 62 times. Targeted ports: 8087. Country: United States.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 24 times. Targeted ports: 445. Country: China. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 64291. Country: Mexico.
Observed 20 times. Targeted ports: 22, 23. Country: Argentina.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 29 times. Targeted ports: 8082. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 23980. Country: Gabon.
Observed 24 times. Targeted ports: 445. Country: Tunisia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 1982. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 12478. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 28338. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Argentina.
Observed 6 times. Targeted ports: 23. Country: Colombia.
Observed 6 times. Targeted ports: 23. Country: Brazil.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 31568. Country: Mexico.
Observed 30 times. Targeted ports: 445. Country: Bolivia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 12 times. Targeted ports: 23. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM ESTABLISHED SYN resend with different seq.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 6 times. Targeted ports: 23. Country: Brazil.
Observed 29 times. Targeted ports: 13000. Country: Japan. Reputation: known attacker.
Observed 3 times. Targeted ports: 20. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 445. Country: Venezuela. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 6 times. Targeted ports: 3389. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 60536. Country: Colombia.
Observed 1 times. Targeted ports: 58560. Country: Brazil.
Observed 1 times. Targeted ports: 43166. Country: Brazil.
Observed 7 times. Targeted ports: 5984. Country: China.
Observed 8 times. Targeted ports: 5984. Country: China.
Observed 8 times. Targeted ports: 5984. Country: China.
Observed 10 times. Targeted ports: 5984. Country: China.
Observed 8 times. Targeted ports: 5984. Country: China.
Observed 9 times. Targeted ports: 5984. Country: China.
Observed 6 times. Targeted ports: 5984. Country: China.
Observed 5 times. Targeted ports: 23. Country: Argentina.
Observed 8 times. Targeted ports: 22000. Country: China. Reputation: known attacker.
Observed 23 times. Targeted ports: 445. Country: Bangladesh. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 19257. Country: Brazil.
Observed 1 times. Targeted ports: 28340. Country: Brazil.
Observed 1 times. Targeted ports: 45813. Country: Brazil.
Observed 1 times. Targeted ports: 46667. Country: Mexico.
Observed 5 times. Targeted ports: 53, 443, 1195, 8080, 9201. Country: Canada.
Observed 22 times. Targeted ports: 445. Country: France. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 56287. Country: Brazil.
Observed 1 times. Targeted ports: 48392. Country: Brazil.
Observed 1 times. Targeted ports: 55874. Country: Brazil.
Observed 1 times. Targeted ports: 10558. Country: Pakistan.
Observed 1 times. Targeted ports: 2519. Country: Canada. Reputation: known attacker.
Observed 1 times. Targeted ports: 44757. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 57876. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: Argentina.
Observed 5 times. Targeted ports: 445. Country: Argentina.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 60021. Country: Canada.
Observed 1 times. Targeted ports: 2352. Country: United Kingdom.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 31146. Country: Ecuador.
Observed 7 times. Targeted ports: 23. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 24776. Country: Romania.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 12512. Country: Brazil. Reputation: known attacker.
Observed 30 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 7 times. Targeted ports: 23. Country: Morocco.
Observed 9 times. Targeted ports: 8080. Country: Pakistan.
Observed 1 times. Targeted ports: 45459. Country: Armenia.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 50803. Country: China.
Observed 7 times. Targeted ports: 23. Country: Australia.
Observed 5 times. Targeted ports: 23. Country: Thailand.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 10 times. Targeted ports: 6002. Country: China.
Observed 7 times. Targeted ports: 6002. Country: China.
Observed 10 times. Targeted ports: 6002. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 1 times. Targeted ports: 51189. Country: Brazil. Reputation: known attacker.
Observed 8 times. Targeted ports: 6002. Country: China.
Observed 8 times. Targeted ports: 6002. Country: China.
Observed 7 times. Targeted ports: 6002. Country: China.
Observed 7 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 123. Country: United States.
Observed 1 times. Targeted ports: 41603. Country: Brazil.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 22. Country: Ecuador.
Observed 400 times. Targeted ports: 3389, 3392, 3401, 3403, 3406, 3407, 3414, 3421, 3455, 3497, 3499, 3515, 3516, 3522, 3524, 3526, 3527, 3529, 3540, 3555, 3556, 3628, 3632, 3648, 3649, 3651, 3715, 3730, 3735, 3768, 3770, 3772, 3775, 3776, 3807, 3816, 3823, 3834, 3857, 3858, 3866, 3878, 3880, 3890, 3895, 3915, 3918, 3919, 3945, 3972, 3986, 9999. Country: Vietnam.
Observed 235 times. Targeted ports: 3389. Country: China.
Observed 16 times. Targeted ports: 3000, 3001, 4000. Country: Luxembourg.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 14 times. Targeted ports: 445. Country: United Arab Emirates.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 2 times. Targeted ports: 1433. Country: South Africa. Reputation: known attacker.
Observed 56 times. Targeted ports: 5671. Country: United States.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 8506. Country: Colombia.
Observed 22 times. Targeted ports: 5672. Country: United States.