Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 476,084 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 8 times. Targeted ports: 1957. Country: China.
Observed 8 times. Targeted ports: 1957. Country: China.
Observed 1 times. Targeted ports: 46434. Country: Mexico.
Observed 1 times. Targeted ports: 59886. Country: United Kingdom.
Observed 1 times. Targeted ports: 64940. Country: United Kingdom.
Observed 1 times. Targeted ports: 18415. Country: Canada. Reputation: known attacker.
Observed 5 times. Targeted ports: 62064. Country: United Kingdom.
Observed 28 times. Targeted ports: 18349. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 22. Country: Russia.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: Argentina.
Observed 1 times. Targeted ports: 2745. Country: France.
Observed 1 times. Targeted ports: 587. Country: Portugal. Reputation: known attacker.
Observed 1 times. Targeted ports: 26196. Country: Mexico.
Observed 8 times. Targeted ports: 31896, 63958. Country: The Netherlands. Reputation: known attacker.
Observed 10 times. Targeted ports: 22. Country: Vietnam. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: sync.
Observed 19 times. Targeted ports: 445. Country: Bangladesh. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 18 times. Targeted ports: 6476, 15884, 44992. Country: France. Reputation: known attacker.
Observed 5 times. Targeted ports: 5985. Country: China. Reputation: known attacker.
Observed 4 times. Targeted ports: 1911. Country: Hong Kong.
Observed 1 times. Targeted ports: 49284. Country: Brazil.
Observed 1 times. Targeted ports: 61672. Country: United Kingdom.
Observed 1 times. Targeted ports: 54950. Country: United Kingdom.
Observed 1 times. Targeted ports: 49288. Country: United Kingdom.
Observed 1 times. Targeted ports: 53643. Country: United Kingdom.
Observed 1 times. Targeted ports: 63369. Country: United Kingdom.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 69. Country: United Kingdom.
Observed 1 times. Targeted ports: 28241. Country: Uruguay.
Observed 19 times. Targeted ports: 445. Country: Taiwan. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 2109. Country: China.
Observed 1 times. Targeted ports: 2109. Country: China.
Observed 3 times. Targeted ports: 5985. Country: China.
Observed 1 times. Targeted ports: 29999. Country: China.
Observed 6 times. Targeted ports: 2109. Country: China. Reputation: bot, crawler.
Observed 6 times. Targeted ports: 2109. Country: China.
Observed 34 times. Targeted ports: 5222. Country: United States.
Observed 4 times. Targeted ports: 4899. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 1433. Country: Ukraine.
Observed 4 times. Targeted ports: 8118. Country: China.
Observed 3 times. Targeted ports: 62573. Country: United Kingdom.
Observed 6 times. Targeted ports: 5001, 53960. Country: United Kingdom.
Observed 3 times. Targeted ports: 51397. Country: United Kingdom.
Observed 3 times. Targeted ports: 63508. Country: United Kingdom.
Observed 4 times. Targeted ports: 2049. Country: Finland.
Observed 5 times. Targeted ports: 18480. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 18085. Country: Germany.
Observed 4 times. Targeted ports: 5222. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 22. Country: Vietnam.
Observed 39 times. Targeted ports: 2987. Country: United States.
Observed 10 times. Targeted ports: 22, 23. Country: Russia.
Observed 13 times. Targeted ports: 2222. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: Colombia.
Observed 20 times. Targeted ports: 45627. Country: Slovenia. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 17 times. Targeted ports: 49671. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 22. Country: Argentina.
Observed 51 times. Targeted ports: 27856. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 16354. Country: Brazil. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 8 times. Targeted ports: 25543, 63500. Country: The Netherlands.
Observed 12 times. Targeted ports: 8520. Country: Malaysia. Reputation: known attacker.
Observed 4 times. Targeted ports: 8443. Country: Malaysia.
Observed 4 times. Targeted ports: 6895. Country: United States.
Observed 4 times. Targeted ports: 23. Country: Vietnam.
Observed 2 times. Targeted ports: 5060. Country: United Kingdom.
Observed 3 times. Targeted ports: 65352. Country: United Kingdom.
Observed 3 times. Targeted ports: 52662. Country: United Kingdom.
Observed 13 times. Targeted ports: 22. Country: Argentina.
Observed 5 times. Targeted ports: 50995. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 9200. Country: China.
Observed 8 times. Targeted ports: 2342. Country: United States.
Observed 1 times. Targeted ports: 60788. Country: United Kingdom.
Observed 5 times. Targeted ports: 1801. Country: China.
Observed 10 times. Targeted ports: 3389. Country: India.
Observed 5 times. Targeted ports: 2109. Country: China.
Observed 4 times. Targeted ports: 23. Country: Vietnam.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 13 times. Targeted ports: 22, 23. Country: Uzbekistan.
Observed 13 times. Targeted ports: 22. Country: The Netherlands. Reputation: known attacker.
Observed 2 times. Targeted ports: 14731. Country: Singapore.
Observed 1 times. Country: Luxembourg.
Observed 2 times. Targeted ports: 14731. Country: Taiwan.
Observed 27 times. Targeted ports: 27018. Country: Germany.
Observed 9 times. Targeted ports: 54399, 61806. Country: United Kingdom.
Observed 3 times. Targeted ports: 50027. Country: United Kingdom.
Observed 3 times. Targeted ports: 61371. Country: United Kingdom.
Observed 3 times. Targeted ports: 56204. Country: United Kingdom.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 23. Country: China.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 11 times. Targeted ports: 23. Country: Italy.
Observed 5 times. Targeted ports: 2339. Country: United States.
Observed 20 times. Targeted ports: 445. Country: Ethiopia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 520. Country: United Kingdom.
Observed 1 times. Targeted ports: 11102. Country: Brazil.
Observed 7 times. Targeted ports: 8884. Country: China.
Observed 7 times. Targeted ports: 8884. Country: China.