← Back to feeds
IOCFREE Searchable

Honeypot infrastructure watch

A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.

488,541
Indicators
IOC
Feed type
9/21/2026
Latest indicator
Open
Access
honeypothistorical
Free

This community feed is publicly available for research.

Open this feed in app
Publisher
UQC4BL9h…w4tDk7
@hookgab

IOC feed · 488,541 indicators

Community
View researchers
Wallet-based publisher identity

Latest indicators

Live indicator delivery for this feed.

42.2.191.74ip
Source: tpot-honeypot

Observed 6 times. Targeted ports: 50111. Country: Hong Kong. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.

207.87.57.219ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 7987. Country: United States.

111.125.221.35ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 31641. Country: India.

64.23.162.35ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 1337. Country: United States.

118.212.120.50ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 5557. Country: China.

124.31.104.98ip
Source: tpot-honeypot

Observed 6 times. Targeted ports: 5557. Country: China.

182.242.169.123ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 5557. Country: China.

223.199.162.208ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 5557. Country: China.

13.222.166.71ip
Source: tpot-honeypot

Observed 1 times. Country: United States.

128.201.148.240ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 21274. Country: Brazil.

123.160.175.253ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 2080. Country: China.

180.111.30.28ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 2080. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

65.114.184.69ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 61109. Country: United States.

171.37.194.10ip
Source: tpot-honeypot

Observed 10 times. Targeted ports: 2080. Country: China.

119.48.134.15ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 2080. Country: China.

161.19.130.16ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 57976. Country: Canada.

111.196.131.25ip
Source: tpot-honeypot

Observed 10 times. Targeted ports: 22. Country: China. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.

201.75.189.37ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 58382. Country: Brazil.

92.134.115.163ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 34915. Country: France.

114.130.156.97ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 21803. Country: Bangladesh.

27.207.39.112ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 123. Country: China.

143.202.229.149ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 55417. Country: Brazil.

142.93.188.136ip
Source: tpot-honeypot

Observed 26 times. Targeted ports: 6936. Country: United States.

49.12.121.56ip
Source: tpot-honeypot

Observed 17 times. Targeted ports: 3389. Country: Germany.

59.15.64.97ip
Source: tpot-honeypot

Observed 294 times. Targeted ports: 22. Country: South Korea. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: bin, dreambox, golden, guest, log and 6 more.

223.199.172.255ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 5022. Country: China.

117.14.242.2ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 5022. Country: China.

223.199.181.122ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 5022. Country: China.

139.170.73.20ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 5022. Country: China.

237.136.30.37ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 60314.

184.16.19.190ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 47457. Country: United States.

104.131.77.75ip
Source: tpot-honeypot

Observed 25 times. Targeted ports: 1224. Country: United States.

202.165.86.47ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Myanmar.

223.199.161.33ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 7048. Country: China.

220.202.112.222ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 7048. Country: China.

191.177.178.210ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 5459. Country: Brazil.

115.211.143.147ip
Source: tpot-honeypot

Observed 6 times. Targeted ports: 23. Country: China.

134.38.89.122ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 57976. Country: United States.

163.192.48.112ip
Source: tpot-honeypot

Observed 343 times. Targeted ports: 22, 5555. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: admin, debian, ftpuser, nagiosadmin, pi and 4 more.

197.60.130.202ip
Source: tpot-honeypot

Observed 14 times. Targeted ports: 23. Country: Egypt.

47.253.180.209ip
Source: tpot-honeypot

Observed 24 times. Targeted ports: 6850, 8098. Country: United States.

143.198.98.200ip
Source: tpot-honeypot

Observed 35 times. Targeted ports: 11000. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction, SURICATA STREAM ESTABLISHED SYN resend with different seq.

176.53.159.38ip
Source: tpot-honeypot

Observed 13 times. Targeted ports: 8022. Country: Türkiye.

166.222.122.45ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 35462. Country: United States.

62.210.90.215ip
Source: tpot-honeypot

Observed 13 times. Targeted ports: 137, 1911. Country: France.

151.115.99.167ip
Source: tpot-honeypot

Observed 19 times. Targeted ports: 8085. Country: Poland.

216.152.241.204ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 27015. Country: United States.

64.227.101.49ip
Source: tpot-honeypot

Observed 108 times. Targeted ports: 8443. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

188.91.218.124ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 8545. Country: The Netherlands.

18.117.90.252ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 53. Country: United States.

103.104.28.170ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 11299. Country: Nepal.

46.228.113.4ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Russia.

116.58.239.189ip
Source: tpot-honeypot

Observed 23 times. Targeted ports: 445. Country: Thailand. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

120.41.90.200ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 40596. Country: China.

95.68.164.90ip
Source: tpot-honeypot

Observed 22 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

170.245.98.38ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 14439. Country: Brazil.

209.99.191.154ip
Source: tpot-honeypot

Observed 14 times. Targeted ports: 3389. Country: Switzerland.

223.167.168.164ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 3002. Country: China.

220.177.9.41ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 3002. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

180.111.30.161ip
Source: tpot-honeypot

Observed 11 times. Targeted ports: 3002. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

111.85.16.144ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 7130. Country: China.

27.220.224.25ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 123. Country: China.

119.162.130.38ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 123. Country: China.

179.233.178.5ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 47350. Country: Brazil.

58.210.181.42ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 36144. Country: China. Reputation: known attacker.

130.241.188.117ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 28327. Country: Sweden.

124.31.106.28ip
Source: tpot-honeypot

Observed 11 times. Targeted ports: 9200. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

124.117.194.14ip
Source: tpot-honeypot

Observed 6 times. Targeted ports: 9200. Country: China.

119.48.135.153ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 9200. Country: China.

112.94.253.33ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 9200. Country: China.

123.145.33.159ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 9200. Country: China.

116.172.251.16ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 9200. Country: China.

218.9.233.157ip
Source: tpot-honeypot

Observed 8 times. Targeted ports: 9200. Country: China.

165.16.180.61ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 25457. Country: South Africa.

150.255.47.123ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 9200. Country: China.

125.25.238.197ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Thailand.

34.182.102.31ip
Source: tpot-honeypot

Observed 4 times. Targeted ports: 8080. Country: United States.

182.101.233.160ip
Source: tpot-honeypot

Observed 6 times. Targeted ports: 23. Country: China.

119.96.96.211ip
Source: tpot-honeypot

Observed 26 times. Targeted ports: 1080, 10801. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

189.37.52.175ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Brazil.

108.162.190.249ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 8545. Country: Canada.

181.42.63.14ip
Source: tpot-honeypot

Observed 24 times. Targeted ports: 445. Country: Chile. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.

108.209.71.235ip
Source: tpot-honeypot

Observed 15 times. Targeted ports: 28188. Country: United States.

50.47.230.114ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 27015. Country: United States.

165.227.35.155ip
Source: tpot-honeypot

Observed 17 times. Targeted ports: 5555. Country: Canada.

94.154.43.135ip
Source: tpot-honeypot

Observed 4 times. Targeted ports: 20128. Country: The Netherlands.

179.89.220.4ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 21970. Country: Brazil.

139.162.158.51ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 520. Country: Germany.

64.23.164.203ip
Source: tpot-honeypot

Observed 26 times. Targeted ports: 8082. Country: United States.

165.227.178.155ip
Source: tpot-honeypot

Observed 28 times. Targeted ports: 3000. Country: United States.

171.4.12.2ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 42113. Country: Thailand.

59.183.91.154ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 20823. Country: India.

35.246.108.247ip
Source: tpot-honeypot

Observed 5 times. Targeted ports: 445. Country: United Kingdom.

91.173.46.168ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 53021. Country: France.

45.165.147.132ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Brazil.

2.182.114.90ip
Source: tpot-honeypot

Observed 9 times. Targeted ports: 23. Country: Iran.

39.74.26.209ip
Source: tpot-honeypot

Observed 11 times. Targeted ports: 49152. Country: China. Alert categories: Attempted Administrator Privilege Gain, Generic Protocol Command Decode. Signatures: ET SCAN Mirai Variant User-Agent (Inbound), SURICATA HTTP Unexpected Request body.

86.125.60.217ip
Source: tpot-honeypot

Observed 1 times. Targeted ports: 42314. Country: Romania.

172.172.26.147ip
Source: tpot-honeypot

Observed 4 times. Targeted ports: 2323. Country: United States. Reputation: known attacker.

110.179.81.96ip
Source: tpot-honeypot

Observed 7 times. Targeted ports: 2397. Country: China.