Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 4 times. Targeted ports: 23. Country: Taiwan.
Observed 8 times. Targeted ports: 23. Country: United States.
Observed 46 times. Targeted ports: 3389. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.
Observed 5 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 55839. Country: Italy.
Observed 130 times. Targeted ports: 2323. Country: Pakistan.
Observed 3 times. Targeted ports: 8443. Country: Russia.
Observed 5 times. Targeted ports: 22. Country: Argentina.
Observed 1 times. Targeted ports: 51643. Country: Thailand.
Observed 5 times. Targeted ports: 23. Country: Taiwan.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 44969. Country: Venezuela.
Observed 6 times. Targeted ports: 23. Country: Chile.
Observed 1 times. Targeted ports: 35318. Country: South Africa.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 16 times. Targeted ports: 22. Country: Argentina.
Observed 646 times. Targeted ports: 5906, 5908. Country: Germany.
Observed 2 times. Targeted ports: 1433. Country: China.
Observed 4 times. Targeted ports: 4000. Country: Hong Kong.
Observed 2 times. Targeted ports: 35396. Country: Mexico.
Observed 14 times. Targeted ports: 3389. Country: Hong Kong.
Observed 15 times. Targeted ports: 3389. Country: Hong Kong.
Observed 14 times. Targeted ports: 3389. Country: Hong Kong.
Observed 14 times. Targeted ports: 3389. Country: Hong Kong.
Observed 1 times. Targeted ports: 64204. Country: Brazil. Reputation: known attacker.
Observed 16 times. Targeted ports: 3389. Country: United Kingdom.
Observed 3 times. Targeted ports: 8080. Country: Germany.
Observed 11 times. Targeted ports: 12137. Country: China.
Observed 8 times. Targeted ports: 12137. Country: China.
Observed 9 times. Targeted ports: 3389. Country: Hong Kong.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 40928. Country: South Korea.
Observed 70 times. Targeted ports: 5555. Country: The Netherlands.
Observed 1 times. Targeted ports: 43152. Country: Brazil.
Observed 11 times. Targeted ports: 6060. Country: United States.
Observed 13 times. Targeted ports: 80. Country: Singapore. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP Request excessive header repetition.
Observed 38 times. Targeted ports: 53, 110, 389, 465, 587, 646, 995. Country: United Kingdom.
Observed 1 times. Targeted ports: 12968. Country: Pakistan.
Observed 14 times. Targeted ports: 3389. Country: Ireland.
Observed 5 times. Targeted ports: 443. Country: Japan.
Observed 8 times. Targeted ports: 23. Country: Latvia.
Observed 8 times. Targeted ports: 3389. Country: France.
Observed 58 times. Targeted ports: 80. Country: United States.
Observed 111 times. Targeted ports: 443. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 2 times. Targeted ports: 12240, 13970. Country: Uzbekistan. Reputation: known attacker.
Observed 3 times. Targeted ports: 1433. Country: China.
Observed 1 times. Targeted ports: 45171. Country: South Africa.
Observed 24 times. Targeted ports: 22, 23. Country: Argentina.
Observed 13 times. Targeted ports: 22, 23. Country: United States.
Observed 7 times. Targeted ports: 3389. Country: Hong Kong.
Observed 81 times. Targeted ports: 1433, 1434, 2181, 3306, 5432, 7574, 8883, 8983, 9093, 9201, 9203, 9300, 9302, 11211, 15672, 29092. Country: United States.
Observed 6 times. Targeted ports: 22. Country: Argentina.
Observed 26 times. Targeted ports: 22, 23. Country: United States.
Observed 1 times. Targeted ports: 80. Country: Brazil.
Observed 12 times. Targeted ports: 3389. Country: United States. Reputation: known attacker.
Observed 9 times. Targeted ports: 5342. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 7 times. Targeted ports: 5342. Country: China.
Observed 11 times. Targeted ports: 5342. Country: China.
Observed 8 times. Targeted ports: 5342. Country: China.
Observed 56 times. Targeted ports: 7574. Country: United States.
Observed 6 times. Targeted ports: 10007. Country: China.
Observed 9 times. Targeted ports: 10007. Country: China. Reputation: known attacker.
Observed 8 times. Targeted ports: 10007. Country: China.
Observed 9 times. Targeted ports: 10007. Country: China.
Observed 5 times. Targeted ports: 10007. Country: China.
Observed 3 times. Targeted ports: 8443. Country: Israel.
Observed 3 times. Targeted ports: 8443. Country: United States.
Observed 6 times. Targeted ports: 8443. Country: Russia.
Observed 11 times. Targeted ports: 443. Country: United States.
Observed 1 times. Targeted ports: 1434. Country: United States.
Observed 3 times. Targeted ports: 5900. Country: Germany.
Observed 80 times. Targeted ports: 33717, 34747, 39080, 41542, 43740, 43890, 47276, 52677, 54200. Country: Cambodia.
Observed 28 times. Targeted ports: 22, 23. Country: Mexico.
Observed 1 times. Targeted ports: 49297. Country: Bangladesh.
Observed 1 times. Targeted ports: 50392. Country: Brazil.
Observed 5 times. Targeted ports: 1433. Country: Taiwan.
Observed 24 times. Targeted ports: 22, 23. Country: Argentina.
Observed 6 times. Targeted ports: 22236. Country: United Kingdom.
Observed 6 times. Targeted ports: 3389. Country: Vietnam. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 7 times. Targeted ports: 10001. Country: China.
Observed 10 times. Targeted ports: 10001. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM CLOSEWAIT FIN out of window.
Observed 6 times. Targeted ports: 10001. Country: China.
Observed 6 times. Targeted ports: 10001. Country: China.
Observed 6 times. Targeted ports: 10001. Country: China.
Observed 8 times. Targeted ports: 10001. Country: China.
Observed 79 times. Targeted ports: 8443. Country: Romania. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 5 times. Targeted ports: 1433. Country: China.
Observed 3 times. Targeted ports: 5060. Country: United States.
Observed 8 times. Targeted ports: 2541. Country: China.
Observed 8 times. Targeted ports: 2541. Country: China. Reputation: known attacker.
Observed 8 times. Targeted ports: 2541. Country: China.
Observed 5 times. Targeted ports: 2541. Country: China.
Observed 5 times. Targeted ports: 10001. Country: China.
Observed 1 times. Targeted ports: 443. Country: United States.
Observed 7 times. Targeted ports: 18789. Country: Japan.
Observed 36 times. Targeted ports: 18210. Country: United States.
Observed 8 times. Targeted ports: 5985. Country: Seychelles.
Observed 8 times. Targeted ports: 23. Country: Ukraine.
Observed 5 times. Targeted ports: 1433. Country: Iran.