Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 29 times. Targeted ports: 22, 23. Country: Colombia.
Observed 4 times. Targeted ports: 445. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 23. Country: Argentina.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 207 times. Targeted ports: 23, 2323. Country: China.
Observed 8 times. Targeted ports: 2443. Country: United States.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 47030. Country: Finland.
Observed 30 times. Targeted ports: 80. Country: United Kingdom.
Observed 320 times. Targeted ports: 23. Country: China.
Observed 63 times. Targeted ports: 2052. Country: United States.
Observed 8 times. Targeted ports: 8686. Country: China.
Observed 9 times. Targeted ports: 8686. Country: China.
Observed 27 times. Targeted ports: 8082. Country: United States.
Observed 27 times. Targeted ports: 22, 23. Country: Indonesia.
Observed 8 times. Targeted ports: 8686. Country: China.
Observed 99 times. Targeted ports: 23, 2323. Country: China.
Observed 1 times. Targeted ports: 137. Country: Brazil.
Observed 8 times. Targeted ports: 4000. Country: China.
Observed 10 times. Targeted ports: 4000. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 198 times. Targeted ports: 23, 2323. Country: China.
Observed 11 times. Targeted ports: 4000. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 8 times. Targeted ports: 4000. Country: China.
Observed 6 times. Targeted ports: 4000. Country: China.
Observed 12 times. Targeted ports: 3389. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.
Observed 9 times. Targeted ports: 3389. Country: China.
Observed 5 times. Targeted ports: 3389. Country: China. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 19427. Country: Brazil.
Observed 6 times. Targeted ports: 52869. Country: Myanmar.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 16 times. Targeted ports: 443. Country: Canada. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 1 times. Targeted ports: 3085. Country: Brazil.
Observed 1 times. Targeted ports: 623. Country: India.
Observed 12 times. Targeted ports: 22, 23. Country: Brazil.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 8 times. Targeted ports: 5985. Country: Hong Kong.
Observed 5 times. Targeted ports: 23. Country: India.
Observed 2 times. Targeted ports: 9046, 15122. Country: Brazil.
Observed 1 times. Country: United Kingdom.
Observed 26 times. Targeted ports: 22, 23. Country: United States.
Observed 8 times. Targeted ports: 23. Country: China.
Observed 13 times. Targeted ports: 22. Country: Romania. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 5 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Targeted ports: 61245. Country: Brazil.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 8243. Country: Uruguay.
Observed 6 times. Targeted ports: 389. Country: China.
Observed 8 times. Targeted ports: 143. Country: United States.
Observed 1 times. Targeted ports: 9485. Country: Brazil.
Observed 1 times. Targeted ports: 36786. Country: Brazil. Reputation: known attacker.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 123. Country: The Netherlands.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 3 times. Targeted ports: 23. Country: Vietnam.
Observed 17 times. Targeted ports: 22, 23. Country: Venezuela.
Observed 1 times. Targeted ports: 4411. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 61366. Country: Canada.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 53229. Country: Brazil.
Observed 7 times. Targeted ports: 5985. Country: Vietnam. Reputation: known attacker.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 3 times. Targeted ports: 23. Country: Chile.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 24 times. Targeted ports: 445. Country: China. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 97 times. Targeted ports: 23. Country: China.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Targeted ports: 52981. Country: Mexico.
Observed 1 times. Targeted ports: 38816. Country: Mexico.
Observed 1 times. Targeted ports: 47342. Country: Brazil.
Observed 3 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Targeted ports: 31253. Country: Brazil.
Observed 1 times. Targeted ports: 62612. Country: Brazil.
Observed 3 times. Targeted ports: 23. Country: South Africa.
Observed 4 times. Targeted ports: 5555. Country: China.
Observed 3050 times. Targeted ports: 2000, 2048, 3000, 3001, 3140, 3400, 3498, 4445, 5038, 5039, 5040, 5041, 5042, 5080, 5081, 5432, 6379, 6380, 7001, 7002, 7021, 7070, 7071, 8000, 8001, 8002, 8011, 8014, 8021, 8022, 8023, 8024, 8025, 8026, 8027, 8028, 8029, 8030, 8031, 8032, 8033, 8034, 8035, 8036, 8037, 8038, 8039, 8040, 8041, 8042, 8043, 8044, 8045, 8046, 8047, 8048, 8049, 8050, 8051, 8052, 8053, 8054, 8055, 8056, 8057, 8058, 8059, 8060, 8061, 8062, 8063, 8064, 8065, 8066, 8067, 8068, 8069, 8070, 8071, 8072, 8073, 8074, 8075, 8076, 8077, 8078, 8079, 8080, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8092, 8093, 8094, 8095, 8096, 8097, 8098, 8099, 8100, 8101, 8102, 8103, 8104, 8105, 8106, 8107, 8108, 8109, 8110, 8111, 8112, 8113, 8114, 8115, 8116, 8117, 8118, 8119, 8120, 8121, 8122, 8123, 8124, 8125, 8126, 8127, 8128, 8129, 8130, 8131, 8132, 8133, 8134, 8135, 8136, 8137, 8138, 8139, 8140, 8141, 8142, 8143, 8144, 8145, 8146, 8147, 8148, 8149, 8150, 8151, 8152, 8153, 8154, 8155, 8156, 8157, 8158, 8159, 8160, 8161, 8162, 8163, 8164, 8165, 8166, 8167, 8168, 8169, 8170, 8171, 8172, 8173, 8174, 8175, 8176, 8177, 8178, 8179, 8180, 8181, 8182, 8183, 8184, 8185, 8186, 8187, 8188, 8189, 8190, 8191, 8192, 8193, 8194, 8195, 8196, 8197, 8198, 8199, 8200, 8201, 8202, 8203, 8204, 8205, 8206, 8207, 8208, 8209, 8210, 8211, 8212, 8213, 8214, 8215, 8216, 8217, 8218, 8219, 8220, 8221, 8222, 8223, 8224, 8225, 8226, 8227, 8228, 8229, 8230, 8231, 8232, 8233, 8234, 8235, 8236, 8237, 8238, 8239, 8240, 8241, 8242, 8243, 8244, 8245, 8246, 8247, 8248, 8249, 8250, 8251, 8252, 8253, 8254, 8255, 8256, 8257, 8258, 8259, 8260, 8261, 8262, 8263, 8264, 8265, 8266, 8267, 8268, 8269, 8270, 8271, 8272, 8273, 8274, 8275, 8276, 8277, 8278, 8279, 8280, 8281, 8282, 8283, 8284, 8285, 8286, 8287, 8288, 8289, 8290, 8291, 8292, 8293, 8294, 8295, 8296, 8297, 8298, 8300, 8400, 8402, 8443, 8500, 8600, 8700, 8800, 8888, 8889, 8900, 8989, 9000, 9002, 9021, 9023, 9100, 9200, 9300, 9400, 9443, 9500, 9600, 9700, 9800, 9900, 10000, 10016, 11211, 18021, 21000, 21001, 21002, 21003, 21004, 21005, 21010, 21011, 21012, 21020, 21021, 21022, 21030, 27017, 30000, 30001, 30002, 30443, 37777, 37810. Country: Switzerland.
Observed 1 times. Targeted ports: 7693. Country: Brazil. Reputation: known attacker.
Observed 4 times. Targeted ports: 25. Country: Vietnam.
Observed 15 times. Targeted ports: 22, 23. Country: Argentina.
Observed 2 times. Targeted ports: 31175. Country: Brazil.
Observed 1 times. Targeted ports: 3357. Country: Brazil.
Observed 2 times. Targeted ports: 23. Country: Pakistan.
Observed 1 times. Targeted ports: 9829. Country: Brazil.
Observed 71 times. Targeted ports: 4444. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 18 times. Targeted ports: 22. Country: Russia. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 5 times. Targeted ports: 445. Country: China. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 42182. Country: Colombia.
Observed 18 times. Targeted ports: 3389. Country: Brazil.
Observed 1 times. Targeted ports: 56171. Country: Mexico.
Observed 3 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 30965. Country: Colombia.
Observed 18 times. Targeted ports: 21, 8443. Country: United Kingdom. Reputation: known attacker.
Observed 9 times. Targeted ports: 8030. Country: China.