Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 1 times. Targeted ports: 55008. Country: Brazil.
Observed 19 times. Targeted ports: 8081. Country: The Netherlands.
Observed 34 times. Targeted ports: 4588. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 8542, 31884. Country: United States.
Observed 1 times. Targeted ports: 32594. Country: China.
Observed 30 times. Targeted ports: 3389. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 784 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 32783. Country: Mexico.
Observed 15 times. Targeted ports: 5555. Country: United States.
Observed 1 times. Targeted ports: 15822. Country: Mexico.
Observed 24 times. Targeted ports: 137. Country: United Kingdom.
Observed 7 times. Targeted ports: 443. Country: Germany.
Observed 6 times. Targeted ports: 137. Country: United Kingdom.
Observed 7 times. Targeted ports: 80. Country: United States.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 15972. Country: Bangladesh.
Observed 8 times. Targeted ports: 5342. Country: China.
Observed 421 times. Targeted ports: 22. Country: China. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 6 times. Targeted ports: 23. Country: Vietnam.
Observed 14 times. Targeted ports: 23. Country: Indonesia.
Observed 23 times. Targeted ports: 9300. Country: United States. Reputation: known attacker.
Observed 9 times. Targeted ports: 1968. Country: China.
Observed 5 times. Targeted ports: 1968. Country: China.
Observed 7 times. Targeted ports: 5342. Country: China.
Observed 5 times. Targeted ports: 5342. Country: China.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 27017. Country: Switzerland.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 19 times. Targeted ports: 22, 23. Country: Bangladesh.
Observed 12 times. Targeted ports: 22, 23. Country: Italy.
Observed 24 times. Targeted ports: 445. Country: United States. Alert categories: Generic Protocol Command Decode, Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use, SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 26590. Country: Pakistan.
Observed 8 times. Targeted ports: 28658. Country: China.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 4 times. Targeted ports: 137. Country: United Kingdom.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 3 times. Targeted ports: 22. Country: Monaco. Reputation: known attacker.
Observed 1 times. Targeted ports: 21959. Country: Spain.
Observed 1 times. Targeted ports: 28723. Country: Ghana.
Observed 4 times. Targeted ports: 443. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA QUIC failed decrypt.
Observed 4 times. Targeted ports: 445. Country: United States.
Observed 7 times. Targeted ports: 10022. Country: China.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 3 times. Targeted ports: 8443. Country: China.
Observed 3 times. Targeted ports: 8443. Country: China.
Observed 3 times. Targeted ports: 8443. Country: Seychelles.
Observed 1 times. Targeted ports: 52984. Country: Colombia.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 3 times. Targeted ports: 8443. Country: Türkiye.
Observed 3 times. Targeted ports: 8443. Country: United Kingdom.
Observed 3 times. Targeted ports: 8443. Country: Israel.
Observed 3 times. Targeted ports: 8443. Country: Israel.
Observed 3 times. Targeted ports: 8443. Country: Israel.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 3 times. Targeted ports: 8443. Country: United States.
Observed 3 times. Targeted ports: 8443. Country: Israel.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 14 times. Targeted ports: 80. Country: China.
Observed 7 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: Armenia.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Targeted ports: 46549. Country: Brazil.
Observed 7 times. Targeted ports: 4567. Country: United States.
Observed 13 times. Targeted ports: 1433. Country: Tunisia. Usernames: sa.
Observed 1 times. Targeted ports: 47176. Country: United States.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 22 times. Targeted ports: 27017. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 4567. Country: Canada.
Observed 1 times. Targeted ports: 51471. Country: France.
Observed 194 times. Targeted ports: 3596, 3899, 5584, 7941, 8525, 20645, 23519, 30798, 32955, 33394, 33589, 37551, 38588, 39185, 45494, 46864, 49026, 51936, 52592, 55119, 56261, 58522, 59803, 60982, 62212, 62334, 63292, 64229, 64492. Country: Eritrea.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 72 times. Targeted ports: 3389. Country: Finland.
Observed 3 times. Targeted ports: 5510. Country: United Kingdom. Reputation: known attacker.
Observed 3 times. Targeted ports: 3389. Country: Australia.
Observed 3 times. Targeted ports: 3389. Country: Thailand.
Observed 2 times. Targeted ports: 2222. Country: China.
Observed 3 times. Targeted ports: 3389. Country: Russia.
Observed 2 times. Targeted ports: 36211. Country: United Kingdom. Reputation: known attacker.
Observed 3 times. Targeted ports: 3389. Country: Saint Lucia.
Observed 5 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 21025. Country: United Kingdom.
Observed 5 times. Targeted ports: 23. Country: Morocco.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 35257. Country: Brazil.
Observed 23 times. Targeted ports: 445. Country: The Netherlands. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 6 times. Targeted ports: 23. Country: Argentina.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 66 times. Targeted ports: 2095. Country: United States.
Observed 1 times. Targeted ports: 9369. Country: Brazil.
Observed 8 times. Targeted ports: 23. Country: Russia.
Observed 7 times. Targeted ports: 23. Country: Türkiye.
Observed 1 times. Targeted ports: 19364. Country: Türkiye.
Observed 50 times. Targeted ports: 6443. Country: Germany.
Observed 1 times. Targeted ports: 26124. Country: Brazil. Reputation: known attacker.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 3 times. Targeted ports: 53. Country: United States.
Observed 5 times. Targeted ports: 23. Country: Russia.
Observed 7 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 32028. Country: Brazil.