Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 10266. Country: China.
Observed 1 times. Targeted ports: 21936. Country: United Kingdom.
Observed 7 times. Targeted ports: 137, 2638, 55378. Country: United Kingdom.
Observed 5 times. Targeted ports: 23. Country: Vietnam.
Observed 9 times. Targeted ports: 60010. Country: China.
Observed 9 times. Targeted ports: 60010. Country: China.
Observed 8 times. Targeted ports: 60010. Country: China.
Observed 4 times. Targeted ports: 8080. Country: The Netherlands.
Observed 13 times. Targeted ports: 1433, 65529. Country: China.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Targeted ports: 30510. Country: Belgium.
Observed 10 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 12 times. Targeted ports: 34567. Country: Vietnam.
Observed 4 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 3 times. Targeted ports: 137. Country: United Kingdom.
Observed 3 times. Targeted ports: 137. Country: United States.
Observed 4 times. Targeted ports: 137. Country: United States.
Observed 3 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 7 times. Targeted ports: 10128. Country: China.
Observed 1 times. Targeted ports: 27015. Country: Brazil.
Observed 65 times. Targeted ports: 445. Country: India. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 52321. Country: Bangladesh.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 5419. Country: France. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 8649. Country: China.
Observed 8 times. Targeted ports: 8649. Country: China.
Observed 8 times. Targeted ports: 8649. Country: China.
Observed 6 times. Targeted ports: 8649. Country: China.
Observed 8 times. Targeted ports: 8649. Country: China.
Observed 10 times. Targeted ports: 10128. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 24 times. Targeted ports: 8098, 60000. Country: United States.
Observed 9 times. Targeted ports: 10128. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 7 times. Targeted ports: 10128. Country: China.
Observed 1 times. Targeted ports: 8027. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 6 times. Targeted ports: 10128. Country: China.
Observed 10 times. Targeted ports: 37334, 37353, 37354, 37508. Country: The Netherlands, United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 5666. Country: Greece.
Observed 1 times. Targeted ports: 56989. Country: United States.
Observed 3 times. Targeted ports: 62050. Country: The Netherlands.
Observed 1 times. Targeted ports: 1900. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 21822. Country: Pakistan.
Observed 5 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 10 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 54408. Country: Brazil. Reputation: known attacker.
Observed 2 times. Targeted ports: 137. Country: United Kingdom, United States.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 10 times. Targeted ports: 22. Country: Vietnam. Reputation: known attacker.
Observed 1 times. Targeted ports: 47733. Country: Mexico.
Observed 1 times. Targeted ports: 35287. Country: Ukraine.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 123. Country: United States.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 146 times. Targeted ports: 1982, 3596, 3899, 5584, 7941, 8525, 17474, 19505, 20645, 23519, 30798, 31354, 32955, 33394, 33589, 36526, 37551, 38588, 39185, 40419, 45170, 45494, 46864, 49026, 49499, 51936, 52592, 55119, 56261, 58522, 59803, 60982, 62212, 62334, 63292, 64229, 64492. Country: Bulgaria.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Country: United States.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 1 times. Targeted ports: 49756. Country: United Kingdom.
Observed 8 times. Targeted ports: 22. Country: South Africa.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 25228. Country: Brazil.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 3 times. Targeted ports: 137. Country: United Kingdom, United States.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 1 times. Targeted ports: 22. Country: Brazil.
Observed 2 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 44664, 51571. Country: Mexico. Reputation: known attacker.
Observed 1 times. Targeted ports: 29792. Country: Brazil. Reputation: known attacker.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 3 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom, United States.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 47 times. Targeted ports: 22. Country: The Netherlands. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: RPM, sshd, support, ubnt.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 3 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Germany, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: Iran, United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 2 times. Targeted ports: 137. Country: United Kingdom.