Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 1 times. Country: United States.
Observed 2 times. Country: United Kingdom.
Observed 3 times. Targeted ports: 23. Country: Nepal.
Observed 1 times. Country: United Kingdom.
Observed 1 times. Country: United States.
Observed 1 times. Targeted ports: 5351. Country: Sweden.
Observed 8 times. Targeted ports: 137. Country: Germany.
Observed 1 times. Country: United States.
Observed 2 times. Country: United States.
Observed 1 times. Targeted ports: 445. Country: Philippines.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 45424. Country: United States.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United States.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 4 times. Targeted ports: 3306. Country: Singapore.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Germany.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 3 times. Targeted ports: 7874. Country: Iran.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 2 times. Targeted ports: 137. Country: United States.
Observed 2 times. Targeted ports: 137. Country: Iran.
Observed 3 times. Targeted ports: 7874. Country: Iran.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 3 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 11 times. Targeted ports: 9999. Country: Netherlands.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 2 times. Targeted ports: 137. Country: Germany.
Observed 4 times. Targeted ports: 23. Country: United States.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: Germany.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 2 times. Targeted ports: 137. Country: Iran.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 1 times. Targeted ports: 40568. Country: China.
Observed 1 times. Targeted ports: 137. Country: Iran.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United States.
Observed 1 times. Targeted ports: 137. Country: Germany.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: Germany.
Observed 1466 times. Targeted ports: 2379. Country: Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM FIN recv but no session, SURICATA STREAM RST recv but no session.
Observed 17 times. Targeted ports: 7000. Country: Russia. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM FIN recv but no session.
Observed 78 times. Targeted ports: 2380, 43568, 43582, 54352, 60368. Country: Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM FIN recv but no session.
Observed 94 times. Targeted ports: 2380, 7000, 32996, 39962, 58288, 60522. Country: France. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM FIN recv but no session.
Observed 3 times. Targeted ports: 22. Country: Singapore. Reputation: known attacker.
Observed 3 times. Targeted ports: 22. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 9200. Country: United States.
Observed 14 times. Targeted ports: 7000. Country: Russia.
Observed 2 times. Targeted ports: 22. Country: China. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM FIN recv but no session.
Observed 3 times. Targeted ports: 5937. Country: China.
Observed 2 times. Targeted ports: 23. Country: Singapore.
Observed 3 times. Targeted ports: 22. Country: United States. Reputation: known attacker.
Observed 3 times. Targeted ports: 22. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 27543. Country: United States.
Observed 1 times. Country: United States.
Observed 3 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Country: United Kingdom.
Observed 41 times. Targeted ports: 21027. Country: United Kingdom.
Observed 1 times. Targeted ports: 53. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 3 times. Targeted ports: 8006.
Observed 6 times. Targeted ports: 2070, 9134, 9522. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 15231. Country: United States.
Observed 5 times. Targeted ports: 53. Country: United States.
Observed 74 times. Targeted ports: 3386. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 36226. Country: United States.
Observed 1 times. Targeted ports: 15834. Reputation: known attacker.
Observed 6 times. Targeted ports: 1604, 3388. Country: United States.
Observed 1 times. Targeted ports: 1719. Country: Brazil.
Observed 6 times. Targeted ports: 3389. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 3 times. Targeted ports: 102. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 3386. Country: United States. Reputation: known attacker.
Observed 25 times. Targeted ports: 22, 23. Country: Argentina.
Observed 8 times. Targeted ports: 23. Country: Peru.
Observed 5 times. Targeted ports: 137. Country: Germany.
Observed 1 times. Targeted ports: 55142. Country: Brazil.
Observed 5 times. Targeted ports: 2121. Country: United States.
Observed 1 times. Targeted ports: 55026. Country: Mexico.