Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 488,541 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 7 times. Targeted ports: 3389. Country: Hong Kong.
Observed 8 times. Targeted ports: 3389. Country: Hong Kong.
Observed 8 times. Targeted ports: 3389. Country: India.
Observed 7 times. Targeted ports: 3389. Country: Hong Kong.
Observed 1 times. Targeted ports: 61329. Country: France.
Observed 1 times. Targeted ports: 110. Country: United States.
Observed 9 times. Targeted ports: 22, 23. Country: Ukraine.
Observed 7 times. Targeted ports: 3389. Country: Finland.
Observed 4 times. Targeted ports: 445. Country: Mexico. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 10009. Country: China.
Observed 5 times. Targeted ports: 25555. Country: United Arab Emirates.
Observed 6 times. Targeted ports: 22. Country: Bolivia.
Observed 1 times. Targeted ports: 61590. Country: Brazil.
Observed 2 times. Targeted ports: 23. Country: Bolivia.
Observed 6 times. Targeted ports: 22. Country: Bolivia.
Observed 2 times. Targeted ports: 514. Country: United States.
Observed 1 times. Targeted ports: 65386. Country: Russia.
Observed 1 times. Targeted ports: 32436. Country: Brazil.
Observed 1 times. Targeted ports: 23. Country: South Korea.
Observed 1 times. Targeted ports: 7779. Country: Venezuela.
Observed 1 times. Targeted ports: 55989. Country: Mexico.
Observed 1 times. Targeted ports: 6419. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 3389. Country: Vietnam.
Observed 1 times. Targeted ports: 27015. Country: Singapore.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 60490. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 23. Country: The Netherlands. Reputation: known attacker.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 2 times. Targeted ports: 161. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 5902. Country: China.
Observed 1 times. Targeted ports: 8749. Country: Brazil.
Observed 1 times. Targeted ports: 64616. Country: Brazil.
Observed 6 times. Targeted ports: 5902. Country: China.
Observed 7 times. Targeted ports: 5902. Country: China.
Observed 7 times. Targeted ports: 5902. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 53607. Country: Brazil.
Observed 2 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 1194. Country: United States.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 37449. Country: Brazil. Reputation: known attacker.
Observed 2 times. Targeted ports: 23. Country: Nicaragua.
Observed 4 times. Targeted ports: 8883. Country: China.
Observed 4 times. Targeted ports: 4096. Country: The Netherlands. Reputation: known attacker.
Observed 6 times. Targeted ports: 49154. Country: China.
Observed 2 times. Targeted ports: 808. Country: United States.
Observed 7 times. Targeted ports: 49154. Country: China.
Observed 7 times. Targeted ports: 49154. Country: China.
Observed 3 times. Targeted ports: 49154. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP missing Host header, SURICATA STREAM spurious retransmission.
Observed 32 times. Targeted ports: 6380. Country: Japan.
Observed 7 times. Targeted ports: 25565. Country: Sweden.
Observed 10 times. Targeted ports: 3389. Country: Brazil.
Observed 3 times. Targeted ports: 9200. Country: France. Reputation: known attacker.
Observed 4 times. Targeted ports: 2087. Country: India.
Observed 2 times. Targeted ports: 992. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 3389. Country: Japan.
Observed 1 times. Targeted ports: 19143. Country: Russia.
Observed 5 times. Targeted ports: 2647. Country: Russia.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 24009. Country: Mexico.
Observed 7 times. Targeted ports: 3389. Country: United Kingdom.
Observed 9 times. Targeted ports: 22, 23. Country: Russia.
Observed 1 times. Targeted ports: 69. Country: United States. Reputation: known attacker.
Observed 7 times. Targeted ports: 1880. Country: China.
Observed 7 times. Targeted ports: 1880. Country: China.
Observed 7 times. Targeted ports: 1880. Country: China.
Observed 6 times. Targeted ports: 1880. Country: China.
Observed 1 times. Targeted ports: 53396. Country: India.
Observed 5 times. Targeted ports: 5985. Country: South Korea. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 57854. Country: United States.
Observed 9 times. Targeted ports: 22, 23. Country: Argentina.
Observed 1 times. Targeted ports: 34753. Country: Brazil.
Observed 19 times. Targeted ports: 2086. Country: United States. Reputation: known attacker.
Observed 43 times. Targeted ports: 27514. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 109. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 102. Country: Malaysia.
Observed 1 times. Targeted ports: 44755. Country: Brazil.
Observed 4 times. Targeted ports: 9200. Country: India.
Observed 1 times. Targeted ports: 36686. Country: Chile.
Observed 1 times. Targeted ports: 44059. Country: Ukraine.
Observed 4 times. Targeted ports: 7080. Country: China.
Observed 1 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 59075. Country: China.
Observed 1 times. Targeted ports: 22340. Country: Brazil.
Observed 1 times. Targeted ports: 7783. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 17 times. Targeted ports: 1883. Country: United States.
Observed 1 times. Targeted ports: 50653. Country: Brazil.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 48 times. Targeted ports: 3389. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.
Observed 6 times. Targeted ports: 4433. Country: United States.
Observed 6 times. Targeted ports: 1029. Country: China.
Observed 6 times. Targeted ports: 1029. Country: China.
Observed 7 times. Targeted ports: 1029. Country: China.
Observed 8 times. Targeted ports: 1029. Country: China.
Observed 7 times. Targeted ports: 1029. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 6 times. Targeted ports: 4022. Country: Brazil.