Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 487,920 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 3954. Country: Mexico. Reputation: known attacker.
Observed 6 times. Targeted ports: 4022. Country: Vietnam.
Observed 1 times. Targeted ports: 49176. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 56752. Country: Brazil.
Observed 1 times. Targeted ports: 36419. Country: Brazil.
Observed 1 times. Targeted ports: 35654. Country: Thailand.
Observed 1 times. Targeted ports: 45536. Country: Mexico.
Observed 1 times. Targeted ports: 7903. Country: Mexico.
Observed 1 times. Targeted ports: 5900. Country: Vietnam. Reputation: known attacker.
Observed 12 times. Targeted ports: 22, 23. Country: Ukraine. Reputation: known attacker.
Observed 11 times. Targeted ports: 30001. Country: United Kingdom.
Observed 833 times. Targeted ports: 11, 13, 195, 225, 264, 515, 520, 555, 626, 805, 808, 880, 888, 1022, 1194, 1200, 1947, 1950, 2060, 2065, 2067, 2111, 2181, 2548, 2555, 2566, 2567, 2762, 3000, 3057, 3069, 3080, 3088, 3092, 3097, 3102, 3115, 3409, 3410, 3524, 3562, 3567, 3702, 3952, 3953, 4043, 4070, 4444, 4524, 4700, 4782, 4808, 5003, 5007, 5025, 5051, 5222, 5280, 5494, 5542, 5567, 5568, 5602, 6006, 6007, 6080, 6352, 6588, 6590, 6666, 7003, 7080, 7535, 7654, 7999, 8018, 8020, 8023, 8039, 8054, 8056, 8083, 8087, 8096, 8101, 8103, 8108, 8123, 8200, 8236, 8243, 8383, 8419, 8420, 8424, 8513, 8663, 8700, 8801, 8803, 8809, 8818, 8822, 8826, 8836, 8850, 8852, 8862, 9008, 9009, 9024, 9034, 9047, 9048, 9160, 9203, 9208, 9219, 9308, 9310, 9443, 9530, 9997, 10450, 11001, 11211, 11300, 12316, 12647, 14344, 16010, 16993, 20547, 33338, 37215, 38012, 50002, 50016, 55442, 55555, 56003, 56021, 56023, 56027, 56031, 56034, 56035, 56039, 56040, 56042, 56044, 56057, 56062, 63031, 65443. Country: United Kingdom.
Observed 4 times. Targeted ports: 1433. Country: Pakistan.
Observed 1 times. Targeted ports: 61242. Country: Brazil.
Observed 13 times. Targeted ports: 2375. Country: Japan. Reputation: known attacker.
Observed 6 times. Targeted ports: 24944. Country: China.
Observed 6 times. Targeted ports: 24944. Country: China.
Observed 8 times. Targeted ports: 24944. Country: China. Reputation: known attacker.
Observed 6 times. Targeted ports: 24944. Country: China.
Observed 1 times. Targeted ports: 25044. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 7 times. Targeted ports: 23. Country: Russia.
Observed 7 times. Targeted ports: 7003. Country: Portugal. Reputation: known attacker.
Observed 4 times. Targeted ports: 3000. Country: Germany.
Observed 4 times. Targeted ports: 1177. Country: United States.
Observed 4 times. Targeted ports: 8470. Country: Malaysia. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: Japan.
Observed 1 times. Targeted ports: 37810. Country: China.
Observed 1 times. Country: New Zealand.
Observed 1 times. Targeted ports: 2112. Country: China.
Observed 1 times. Targeted ports: 52159. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: Malaysia.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 16188. Country: Senegal.
Observed 1 times. Targeted ports: 11982. Country: Brazil.
Observed 1 times. Targeted ports: 27016. Country: Germany.
Observed 7 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 47829. Country: Brazil.
Observed 5 times. Targeted ports: 22. Country: China. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 6 times. Targeted ports: 22. Country: Vietnam. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 5 times. Targeted ports: 5984. Country: United States. Reputation: known attacker.
Observed 10 times. Targeted ports: 22, 23. Country: Chile.
Observed 1 times. Targeted ports: 33945. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 2303. Country: United Kingdom. Reputation: known attacker.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 6 times. Targeted ports: 22. Country: Ukraine.
Observed 6 times. Targeted ports: 22. Country: Ukraine.
Observed 5 times. Targeted ports: 23. Country: Ukraine.
Observed 229 times. Targeted ports: 80. Country: United States.
Observed 65 times. Targeted ports: 23. Country: India. Usernames: admin, de, default, root.
Observed 1 times. Targeted ports: 1069. Country: France.
Observed 10 times. Targeted ports: 22, 23. Country: Iraq.
Observed 28 times. Targeted ports: 1962. Country: Germany. Reputation: known attacker.
Observed 51 times. Targeted ports: 47001. Country: United States.
Observed 49 times. Targeted ports: 8060. Country: United States.
Observed 12 times. Targeted ports: 80. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA HTTP Request excessive header repetition.
Observed 5 times. Targeted ports: 81. Country: India.
Observed 7 times. Targeted ports: 7548. Country: United States.
Observed 1 times. Targeted ports: 5000. Country: Hong Kong. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Taiwan.
Observed 1 times. Targeted ports: 54352. Country: Sweden.
Observed 8 times. Targeted ports: 23. Country: Mexico.
Observed 1 times. Targeted ports: 54960. Country: Argentina.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 15 times. Targeted ports: 2404. Country: United States.
Observed 1 times. Targeted ports: 7781. Country: Brazil.
Observed 12 times. Targeted ports: 25565. Country: Mauritius. Reputation: known attacker.
Observed 6 times. Targeted ports: 50805. Country: United States.
Observed 12 times. Targeted ports: 9999. Country: Australia.
Observed 1 times. Country: United States.
Observed 3 times. Targeted ports: 2222. Country: United States. Reputation: known attacker.
Observed 11 times. Targeted ports: 1167. Country: United States.
Observed 6 times. Targeted ports: 23. Country: Paraguay.
Observed 13 times. Targeted ports: 22, 23. Country: Brazil.
Observed 5 times. Targeted ports: 5985. Country: Iran.
Observed 5 times. Targeted ports: 8000. Country: Russia. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 1 times. Targeted ports: 8080. Country: Nepal.
Observed 4 times. Targeted ports: 8041. Country: France.
Observed 1 times. Targeted ports: 15790. Country: Brazil.
Observed 2 times. Targeted ports: 37. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 161. Country: Sweden.
Observed 9 times. Targeted ports: 445. Country: Russia.
Observed 5 times. Targeted ports: 23. Country: Chile.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 25 times. Targeted ports: 5006. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 1433. Country: Pakistan.
Observed 4 times. Targeted ports: 6664. Country: China.
Observed 1 times. Targeted ports: 1433. Country: Iraq.
Observed 5 times. Targeted ports: 6000. Country: United Arab Emirates. Reputation: known attacker.
Observed 1 times. Targeted ports: 1625. Country: Brazil.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 7 times. Targeted ports: 18080. Country: United States.
Observed 2 times. Targeted ports: 1433. Country: Türkiye.
Observed 8 times. Targeted ports: 5700. Country: China.