Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 438,210 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 94 times. Targeted ports: 443. Country: United Kingdom. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 3 times. Targeted ports: 23656. Country: United States. Reputation: mass scanner.
Observed 2 times. Targeted ports: 81. Country: The Netherlands.
Observed 4 times. Targeted ports: 18015. Country: United States.
Observed 4 times. Targeted ports: 57952. Country: United Kingdom. Reputation: known attacker.
Observed 4 times. Targeted ports: 3306. Country: Belgium.
Observed 19 times. Targeted ports: 5353. Country: Portugal. Reputation: known attacker.
Observed 6 times. Targeted ports: 18789. Country: Japan.
Observed 4 times. Targeted ports: 1200. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 60000. Country: South Korea. Reputation: known attacker.
Observed 1 times. Targeted ports: 56926. Country: Bangladesh.
Observed 1 times. Targeted ports: 1434. Country: Vietnam. Reputation: known attacker.
Observed 1 times. Targeted ports: 40551. Country: Brazil.
Observed 11 times. Targeted ports: 12822. Country: Australia.
Observed 4 times. Targeted ports: 4000. Country: China.
Observed 16 times. Targeted ports: 7547. Country: Singapore. Reputation: known attacker.
Observed 4 times. Targeted ports: 2375. Country: United States. Reputation: known attacker.
Observed 20 times. Targeted ports: 9083. Country: United States.
Observed 4 times. Targeted ports: 8428. Country: United Kingdom.
Observed 5 times. Targeted ports: 3399. Country: United States. Reputation: known attacker.
Observed 11 times. Targeted ports: 20016. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 46248. Country: United States.
Observed 4 times. Targeted ports: 445. Country: Russia.
Observed 6 times. Targeted ports: 23. Country: Ukraine.
Observed 1 times. Country: United States.
Observed 8 times. Targeted ports: 443. Country: United States.
Observed 2 times. Targeted ports: 111. Country: United States. Reputation: known attacker.
Observed 12 times. Targeted ports: 2404. Country: United States.
Observed 5 times. Targeted ports: 4444. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 10 times. Targeted ports: 22, 23. Country: Argentina.
Observed 4 times. Targeted ports: 1212. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 44852. Country: The Netherlands.
Observed 8 times. Targeted ports: 3389. Country: Russia.
Observed 5 times. Targeted ports: 554, 1554. Country: Ukraine.
Observed 5 times. Targeted ports: 9082. Country: China.
Observed 227 times. Targeted ports: 23. Country: Belgium. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions. Usernames: ; � admin.$cmd �� hello �? .
Observed 4 times. Targeted ports: 23. Country: Albania.
Observed 7 times. Targeted ports: 23. Country: Myanmar.
Observed 4 times. Targeted ports: 9200. Country: United States. Reputation: known attacker.
Observed 3 times. Targeted ports: 10001. Country: United States. Reputation: mass scanner.
Observed 7 times. Targeted ports: 8983. Country: China.
Observed 4 times. Targeted ports: 8983. Country: China.
Observed 6 times. Targeted ports: 8983. Country: China.
Observed 6 times. Targeted ports: 8983. Country: China.
Observed 7 times. Targeted ports: 8983. Country: China.
Observed 4 times. Targeted ports: 10000. Country: Singapore. Reputation: known attacker.
Observed 3 times. Targeted ports: 12443. Country: United States. Reputation: mass scanner.
Observed 206 times. Targeted ports: 9200. Country: United States.
Observed 1 times. Targeted ports: 88. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 9200. Country: China. Reputation: known attacker.
Observed 6 times. Targeted ports: 9200. Country: China.
Observed 8 times. Targeted ports: 9200. Country: China.
Observed 4 times. Targeted ports: 47299. Country: United Kingdom. Reputation: known attacker.
Observed 1 times. Targeted ports: 1434. Country: India. Reputation: known attacker.
Observed 5 times. Targeted ports: 9200. Country: China. Reputation: known attacker.
Observed 5 times. Targeted ports: 9200. Country: China.
Observed 7 times. Targeted ports: 9200. Country: China.
Observed 5 times. Targeted ports: 9200. Country: China.
Observed 7 times. Targeted ports: 9200. Country: China.
Observed 1 times. Targeted ports: 57729. Country: Brazil.
Observed 1 times. Targeted ports: 44013. Country: Brazil.
Observed 9 times. Targeted ports: 6379. Country: Belgium.
Observed 2 times. Targeted ports: 70. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 943. Country: United States. Reputation: known attacker.
Observed 14 times. Targeted ports: 31337. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 4 times. Targeted ports: 23. Country: China.
Observed 1 times. Targeted ports: 1434. Country: Poland.
Observed 2 times. Targeted ports: 69. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 3934. Country: Brazil.
Observed 2 times. Targeted ports: 88. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 993. Country: Japan. Reputation: known attacker.
Observed 2 times. Targeted ports: 517. Country: United States. Reputation: known attacker.
Observed 57 times. Targeted ports: 5357. Country: United States.
Observed 8 times. Targeted ports: 50895. Country: Germany. Reputation: known attacker.
Observed 5 times. Targeted ports: 50895. Country: Germany. Reputation: known attacker.
Observed 22 times. Targeted ports: 8000. Country: United States.
Observed 1 times. Country: United States.
Observed 61 times. Targeted ports: 443. Country: China.
Observed 8 times. Targeted ports: 2031. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 6 times. Targeted ports: 2031. Country: China.
Observed 7 times. Targeted ports: 2031. Country: China.
Observed 7 times. Targeted ports: 2031. Country: China. Reputation: known attacker.
Observed 1 times. Country: United States.
Observed 1 times. Targeted ports: 35242. Country: Brazil.
Observed 1 times. Targeted ports: 58545. Country: Brazil. Reputation: known attacker.
Observed 4 times. Targeted ports: 47676. Country: United States.
Observed 25 times. Targeted ports: 4434. Country: Malaysia.
Observed 6 times. Targeted ports: 16097. Country: China.
Observed 6 times. Targeted ports: 16097. Country: China.