Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 7 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 9999. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 80. Country: United States.
Observed 3617 times. Targeted ports: 104, 1024, 1025, 1026, 1027, 1028, 1029, 1099, 1110, 1111, 1153, 1177, 1180, 1194, 1200, 1207, 1234, 1344, 1400, 1414, 1447, 1471, 1515, 1599, 1604, 1605, 1701, 1723, 1741, 1800, 1801, 1900, 1911, 1925, 1926, 1958, 1962, 1965, 1966, 1970, 1980, 2000, 2001, 2002, 2003, 2008, 2012, 2022, 2049, 2052, 2053, 2067, 2077, 2079, 2081, 2082, 2083, 2086, 2087, 2100, 2103, 2121, 2154, 2181, 2200, 2271, 2323, 2332, 2345, 2375, 2376, 2379, 2404, 2423, 2455, 2480, 2599, 2628, 2761, 2762, 2850, 3001, 3050, 3160, 3165, 3268, 3269, 3299, 3301, 3307, 3310, 3341, 3388, 3443, 3460, 3510, 3541, 3542, 3551, 3580, 3702, 3749, 3780, 3790, 4010, 4022, 4040, 4063, 4064, 4085, 4100, 4150, 4157, 4165, 4190, 4242, 4244, 4282, 4321, 4344, 4369, 4401, 4430, 4433, 4434, 4445, 4447, 4461, 4477, 4500, 4502, 4506, 4567, 4572, 4664, 4786, 4840, 4899, 4911, 4949, 5003, 5005, 5006, 5007, 5009, 5010, 5025, 5061, 5083, 5090, 5100, 5105, 5120, 5130, 5135, 5150, 5160, 5190, 5201, 5222, 5225, 5226, 5227, 5229, 5231, 5234, 5236, 5242, 5245, 5246, 5248, 5249, 5251, 5252, 5255, 5256, 5272, 5277, 5357, 5433, 5435, 5440, 5443, 5446, 5503, 5544, 5555, 5560, 5620, 5640, 5658, 5680, 5683, 5701, 5801, 5804, 5858, 5901, 5903, 5904, 5905, 5906, 5907, 5908, 5909, 5910, 5911, 5914, 5915, 5916, 5917, 5920, 5938, 5985, 5986, 5989, 5997, 5998, 6000, 6001, 6002, 6006, 6007, 6020, 6036, 6050, 6060, 6061, 6080, 6100, 6264, 6380, 6440, 6443, 6482, 6633, 6653, 6664, 6666, 6668, 6686, 6688, 6697, 6699, 6881, 7000, 7005, 7007, 7013, 7014, 7020, 7022, 7025, 7050, 7070, 7071, 7078, 7079, 7080, 7081, 7082, 7083, 7084, 7085, 7086, 7087, 7088, 7100, 7102, 7105, 7170, 7218, 7403, 7415, 7434, 7474, 7510, 7548, 7657, 7676, 7773, 7775, 7777, 7778, 7779, 7900, 7979, 7989, 7999, 8003, 8004, 8005, 8006, 8009, 8011, 8015, 8020, 8022, 8023, 8026, 8058, 8060, 8061, 8082, 8083, 8084, 8085, 8086, 8087, 8089, 8092, 8093, 8096, 8098, 8099, 8100, 8102, 8104, 8105, 8109, 8110, 8112, 8113, 8126, 8139, 8140, 8159, 8181, 8188, 8190, 8200, 8203, 8291, 8300, 8334, 8343, 8383, 8440, 8441, 8444, 8445, 8449, 8451, 8453, 8454, 8455, 8502, 8503, 8506, 8513, 8520, 8521, 8528, 8529, 8536, 8543, 8544, 8545, 8554, 8556, 8562, 8566, 8570, 8573, 8575, 8576, 8578, 8581, 8593, 8594, 8599, 8602, 8606, 8649, 8702, 8703, 8704, 8705, 8708, 8709, 8728, 8731, 8732, 8764, 8800, 8834, 8880, 8885, 8886, 8887, 8889, 8999, 9002, 9003, 9004, 9009, 9013, 9051, 9052, 9054, 9055, 9056, 9061, 9062, 9063, 9064, 9065, 9066, 9068, 9069, 9072, 9073, 9074, 9075, 9076, 9077, 9080, 9082, 9087, 9089, 9090, 9091, 9092, 9098, 9112, 9113, 9114, 9115, 9116, 9117, 9118, 9119, 9120, 9121, 9122, 9123, 9124, 9125, 9128, 9134, 9141, 9142, 9143, 9144, 9145, 9146, 9147, 9148, 9149, 9150, 9152, 9153, 9157, 9159, 9160, 9161, 9162, 9163, 9164, 9165, 9166, 9167, 9168, 9170, 9174, 9175, 9176, 9177, 9179, 9180, 9181, 9182, 9183, 9184, 9185, 9186, 9187, 9188, 9190, 9192, 9193, 9195, 9197, 9198, 9243, 9289, 9295, 9306, 9333, 9398, 9410, 9441, 9445, 9454, 9455, 9456, 9501, 9510, 9530, 9532, 9600, 9633, 9674, 9710, 9711, 9734, 9754, 9761, 9773, 9779, 9800, 9803, 9804, 9869, 9876, 9898, 9901, 9944, 9966, 9981, 9988, 10001, 10002, 10003, 10004, 10006, 10007, 10008, 10009, 10013, 10020, 10022, 10051, 10065, 10075, 10080, 10081, 10100, 10134, 10250, 10324, 10380, 10533, 10554, 10892, 10909, 10911, 10934, 10935, 10936, 11000, 11002, 11007, 11110, 11112, 11180, 11288, 11300, 11371, 11401, 11434, 11601, 11602, 11680, 11681, 11701, 12111, 12323, 12324, 12325, 12326, 12345, 13579, 14101, 14130, 14147, 14265, 14344, 14401, 14402, 14403, 14404, 14406, 14407, 14873, 14875, 14894, 14895, 14896, 14897, 14900, 14901, 14903, 14905, 14909, 15000, 15001, 15018, 15038, 15040, 15042, 15044, 15123, 15151, 15443, 15588, 15831, 16010, 16030, 16316, 16800, 16831, 16992, 16993, 17443, 18080, 18245, 18264, 18443, 19000, 19015, 19071, 19233, 20000, 20001, 20010, 20018, 20020, 20030, 20040, 20050, 20060, 20070, 20080, 20090, 20100, 20106, 20107, 20121, 20200, 20201, 20208, 20256, 20500, 20512, 20547, 20600, 20880, 21002, 21025, 21200, 21242, 21300, 21305, 21379, 22000, 22022, 22103, 22107, 22206, 22556, 22705, 23023, 23424, 24442, 24808, 25000, 25001, 25002, 25006, 25007, 25105, 25565, 27015, 28015, 28017, 29840, 29842, 29984, 30000, 30001, 30002, 30003, 30005, 30006, 30050, 30104, 30106, 30110, 30111, 30112, 30113, 30120, 30121, 30122, 30123, 31444, 32080, 32101, 32102, 32303, 32400, 32764, 33060, 35000, 37215, 37777, 38520, 40894, 41800, 42901, 44158, 44303, 44304, 44305, 44306, 44333, 44336, 44345, 44350, 44818, 45000, 45001, 47001, 47990, 49153, 49502, 49592, 49682, 49684, 49686, 49688, 49692, 49767, 50001, 50011, 50012, 50070, 50100, 50101, 50113, 50805, 50995, 50996, 50997, 50999, 51000, 51001, 51002, 51003, 51005, 51007, 51106, 51235, 52230, 52311, 52869, 52881, 52931, 52951, 54138, 55000, 55442, 55443, 55553, 55554, 55555, 56001, 58000, 58603, 60001, 60010, 60030, 60129, 60443, 61234, 61613, 61616, 61617, 62078, 62237, 62865, 63260, 64295. Country: Romania. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction, SURICATA Applayer Mismatch protocol both directions, SURICATA STREAM 3way handshake wrong seq wrong ack and 1 more.
Observed 4 times. Targeted ports: 445. Country: Kuwait.
Observed 5 times. Targeted ports: 5938. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 64297. Country: France.
Observed 25 times. Targeted ports: 9201. Country: Germany.
Observed 5 times. Targeted ports: 31337. Country: United States.
Observed 1 times. Targeted ports: 23391. Country: Mexico.
Observed 139 times. Targeted ports: 161. Country: Australia.
Observed 13 times. Targeted ports: 4444. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 62619. Country: Ukraine. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 30001. Country: Mexico.
Observed 1 times. Targeted ports: 1433. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 20 times. Targeted ports: 22, 23. Country: India.
Observed 6 times. Targeted ports: 5080. Country: United States.
Observed 19 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 1433. Country: China.
Observed 7 times. Targeted ports: 3524. Country: China.
Observed 6 times. Targeted ports: 3524. Country: China.
Observed 6 times. Targeted ports: 3524. Country: China.
Observed 6 times. Targeted ports: 3524. Country: China.
Observed 7 times. Targeted ports: 3524. Country: China. Reputation: known attacker.
Observed 9 times. Targeted ports: 22. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 12 times. Targeted ports: 8086. Country: India.
Observed 1 times. Targeted ports: 33575. Country: Uruguay.
Observed 1 times. Targeted ports: 88. Country: The Netherlands.
Observed 3 times. Targeted ports: 5555. Country: China. Reputation: known attacker.
Observed 5 times. Targeted ports: 5984. Country: China.
Observed 7 times. Targeted ports: 2742. Country: China.
Observed 9 times. Targeted ports: 2742. Country: China.
Observed 5 times. Targeted ports: 2742. Country: China. Reputation: known attacker.
Observed 8 times. Targeted ports: 2742. Country: China.
Observed 5 times. Targeted ports: 3443. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 48721. Country: United States.
Observed 5 times. Targeted ports: 23. Country: Argentina.
Observed 9 times. Targeted ports: 22, 23. Country: Argentina.
Observed 1 times. Targeted ports: 29262. Country: Brazil. Reputation: known attacker.
Observed 5 times. Targeted ports: 11740. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 34408. Country: France.
Observed 5 times. Targeted ports: 11743. Country: United States.
Observed 2 times. Targeted ports: 888. Country: Germany.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 59992. Country: China.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 10 times. Targeted ports: 22, 23. Country: South Africa.
Observed 10 times. Targeted ports: 22, 23. Country: Tunisia.
Observed 1 times. Targeted ports: 7474. Country: United States.
Observed 20 times. Targeted ports: 22, 23. Country: United States.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 17310. Country: Argentina.
Observed 7 times. Targeted ports: 3389. Country: Colombia.
Observed 5 times. Targeted ports: 4333. Country: United States.
Observed 1 times. Targeted ports: 15060. Country: United Kingdom.
Observed 5 times. Targeted ports: 8022. Country: China.
Observed 1 times. Targeted ports: 1433. Country: Pakistan.
Observed 4 times. Targeted ports: 23. Country: Brazil.
Observed 4 times. Targeted ports: 23. Country: Taiwan.
Observed 1 times. Targeted ports: 123. Country: Türkiye.
Observed 5 times. Targeted ports: 23. Country: Taiwan.
Observed 1 times. Targeted ports: 62270. Country: Chile.
Observed 1 times. Targeted ports: 33512. Country: Germany.
Observed 1 times. Targeted ports: 3665. Country: Brazil.
Observed 29 times. Targeted ports: 2051. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 3294. Country: Italy.
Observed 1 times. Targeted ports: 23825. Country: Brazil.
Observed 5 times. Targeted ports: 9700. Country: China.
Observed 1 times. Targeted ports: 62441. Country: Brazil. Reputation: known attacker.
Observed 4 times. Targeted ports: 9000. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 1433. Country: China. Reputation: known attacker.
Observed 4 times. Targeted ports: 1433. Country: Pakistan.
Observed 5 times. Targeted ports: 5269. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 59534. Country: China.
Observed 1 times. Targeted ports: 21401. Country: Uruguay.
Observed 4 times. Targeted ports: 23. Country: Ecuador.
Observed 1 times. Targeted ports: 55131. Country: Brazil.
Observed 1 times. Targeted ports: 7473. Country: United States.
Observed 5 times. Targeted ports: 4786. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: India.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 50 times. Targeted ports: 27314. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 53881. Country: India.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 2051. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 12 times. Targeted ports: 1443. Country: United States.
Observed 1 times. Targeted ports: 1433. Country: Vietnam.
Observed 63 times. Targeted ports: 50030. Country: United States.
Observed 21 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 16 times. Targeted ports: 50070. Country: United States. Alert categories: Detection of a Network Scan. Signatures: ET SCAN Zmap User-Agent (Inbound).
Observed 3 times. Targeted ports: 5060. Country: United States.
Observed 19 times. Targeted ports: 9060. Country: United States. Reputation: known attacker.