Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 475,921 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 32234. Country: The Netherlands.
Observed 10 times. Targeted ports: 3389. Country: Ukraine.
Observed 1 times. Targeted ports: 47508. Country: Brazil.
Observed 10 times. Targeted ports: 22, 23. Country: Ukraine.
Observed 5 times. Targeted ports: 5902. Country: United States.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 5 times. Targeted ports: 49672. Country: United States.
Observed 6 times. Targeted ports: 53. Country: Colombia. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 1 times. Targeted ports: 50903. Country: Chile.
Observed 3 times. Targeted ports: 62328. Country: United Kingdom.
Observed 3 times. Targeted ports: 62480. Country: United Kingdom.
Observed 3 times. Targeted ports: 53296. Country: United Kingdom.
Observed 3 times. Targeted ports: 58230. Country: United Kingdom.
Observed 8 times. Targeted ports: 46972, 62163. Country: United Kingdom.
Observed 3 times. Targeted ports: 63023. Country: The Netherlands. Reputation: known attacker.
Observed 8 times. Targeted ports: 12323. Country: Germany. Reputation: known attacker.
Observed 4 times. Targeted ports: 22. Country: The Netherlands. Reputation: known attacker.
Observed 3 times. Targeted ports: 59346. Country: United Kingdom.
Observed 3 times. Targeted ports: 52552. Country: United Kingdom.
Observed 8 times. Targeted ports: 29239, 58354. Country: United Kingdom.
Observed 3 times. Targeted ports: 57013. Country: United Kingdom.
Observed 3 times. Targeted ports: 60573. Country: United Kingdom.
Observed 3 times. Targeted ports: 22. Country: The Netherlands. Reputation: known attacker.
Observed 45 times. Targeted ports: 3378, 3379, 3380, 3381, 3382, 3383, 3384, 3385, 3386, 3387, 3388. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 5 times. Targeted ports: 17841. Country: United Kingdom.
Observed 7 times. Targeted ports: 8194. Country: China.
Observed 7 times. Targeted ports: 8194. Country: China.
Observed 8 times. Targeted ports: 8194. Country: China. Reputation: known attacker.
Observed 6 times. Targeted ports: 8194. Country: China. Reputation: known attacker.
Observed 7 times. Targeted ports: 8194. Country: China.
Observed 1 times. Targeted ports: 1433. Country: India.
Observed 1 times. Targeted ports: 59222. Country: Brazil. Reputation: known attacker.
Observed 1 times. Targeted ports: 49733. Country: Switzerland.
Observed 13 times. Targeted ports: 9000. Country: United States.
Observed 7 times. Targeted ports: 53657, 56002. Country: United Kingdom.
Observed 3 times. Targeted ports: 58438. Country: United Kingdom.
Observed 3 times. Targeted ports: 49879. Country: United Kingdom.
Observed 3 times. Targeted ports: 60558. Country: United Kingdom.
Observed 3 times. Targeted ports: 63735. Country: United Kingdom.
Observed 5 times. Targeted ports: 22. Country: Ivory Coast.
Observed 3 times. Targeted ports: 51227. Country: United Kingdom. Reputation: known attacker.
Observed 3 times. Targeted ports: 56610. Country: United Kingdom. Reputation: known attacker.
Observed 51 times. Targeted ports: 27859. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 20 times. Targeted ports: 9999. Country: Australia.
Observed 4 times. Targeted ports: 9306. Country: United States.
Observed 1 times. Targeted ports: 2222. Country: China.
Observed 3 times. Targeted ports: 58853. Country: United Kingdom.
Observed 3 times. Targeted ports: 59630. Country: United Kingdom.
Observed 3 times. Targeted ports: 56848. Country: United Kingdom.
Observed 7 times. Targeted ports: 31697, 55508. Country: United Kingdom.
Observed 3 times. Targeted ports: 63423. Country: United Kingdom.
Observed 1 times. Targeted ports: 43459. Country: United States.
Observed 5 times. Targeted ports: 23. Country: Mexico.
Observed 1 times. Targeted ports: 38022. Country: Brazil.
Observed 5 times. Targeted ports: 3155. Country: Malaysia. Reputation: known attacker.
Observed 15 times. Targeted ports: 25. Country: Seychelles. Reputation: known attacker.
Observed 6 times. Targeted ports: 22. Country: Russia.
Observed 4 times. Targeted ports: 23. Country: Argentina.
Observed 20 times. Targeted ports: 445. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 3 times. Targeted ports: 22. Country: The Netherlands.
Observed 5 times. Targeted ports: 52869. Country: Germany.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 3 times. Targeted ports: 64184. Country: United Kingdom.
Observed 3 times. Targeted ports: 50417. Country: United Kingdom.
Observed 9 times. Targeted ports: 14488, 57715. Country: United Kingdom.
Observed 3 times. Targeted ports: 53647. Country: United Kingdom.
Observed 3 times. Targeted ports: 49485. Country: United Kingdom.
Observed 1 times. Targeted ports: 53225. Country: United Kingdom. Reputation: known attacker.
Observed 12 times. Targeted ports: 80. Country: United Kingdom.
Observed 5 times. Targeted ports: 51000. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 5937. Country: Czechia.
Observed 1 times. Targeted ports: 4222. Country: Mexico.
Observed 1 times. Targeted ports: 39171. Country: Brazil.
Observed 5 times. Targeted ports: 53782. Country: United Kingdom.
Observed 11 times. Targeted ports: 12345. Country: France. Alert categories: Detection of a Network Scan, Generic Protocol Command Decode. Signatures: ET SCAN Zmap User-Agent (Inbound), SURICATA Applayer Detect protocol only one direction.
Observed 6 times. Targeted ports: 50553. Country: United Kingdom. Reputation: known attacker.
Observed 3 times. Targeted ports: 61793. Country: United Kingdom.
Observed 3 times. Targeted ports: 56259. Country: United Kingdom.
Observed 3 times. Targeted ports: 55571. Country: United Kingdom.
Observed 3 times. Targeted ports: 62198. Country: United Kingdom.
Observed 9 times. Targeted ports: 38474, 55431. Country: United Kingdom.
Observed 25 times. Targeted ports: 49669. Country: United States. Reputation: known attacker.
Observed 87 times. Targeted ports: 49154. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 8999. Country: United States.
Observed 10 times. Targeted ports: 20128. Country: Singapore. Reputation: known attacker.
Observed 53 times. Targeted ports: 27858. Country: Hong Kong.
Observed 1 times. Targeted ports: 60153. Country: Thailand.
Observed 8 times. Targeted ports: 22. Country: China. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 7 times. Targeted ports: 11434. Country: The Netherlands.
Observed 6 times. Targeted ports: 57352. Country: United Kingdom.
Observed 1 times. Targeted ports: 1957. Country: China.
Observed 5 times. Targeted ports: 9443. Country: United States.
Observed 3 times. Targeted ports: 56390. Country: United Kingdom.
Observed 3 times. Targeted ports: 51070. Country: United Kingdom.
Observed 3 times. Targeted ports: 54512. Country: United Kingdom.
Observed 7 times. Targeted ports: 1957. Country: China.
Observed 6 times. Targeted ports: 1957. Country: China.