Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 435,515 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 5 times. Targeted ports: 8443. Country: Sweden.
Observed 1 times. Targeted ports: 60709. Country: Argentina.
Observed 2 times. Targeted ports: 771. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 22222. Country: China. Reputation: known attacker.
Observed 5 times. Targeted ports: 80. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack, SURICATA STREAM spurious retransmission.
Observed 19 times. Targeted ports: 5902. Country: United States.
Observed 1 times. Targeted ports: 42919. Country: New Zealand.
Observed 2 times. Targeted ports: 88. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 4443. Country: United States.
Observed 2 times. Targeted ports: 9100. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 18245. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 9999. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 18080. Country: Brazil. Reputation: known attacker.
Observed 5 times. Targeted ports: 8126. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 31786. Country: Japan.
Observed 2 times. Targeted ports: 23. Country: United States.
Observed 5 times. Targeted ports: 4055. Country: Indonesia. Reputation: known attacker.
Observed 4 times. Targeted ports: 40000. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 7210. Country: United States.
Observed 4 times. Targeted ports: 9761. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 27015. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 22. Country: Chile.
Observed 20 times. Targeted ports: 8890. Country: Malaysia. Reputation: known attacker.
Observed 1 times. Targeted ports: 80. Country: Germany. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Malaysia.
Observed 11 times. Targeted ports: 80. Country: Panama.
Observed 5 times. Targeted ports: 27862. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 4329. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 2051. Country: China.
Observed 2 times. Targeted ports: 389. Country: Morocco.
Observed 2 times. Targeted ports: 700. Country: Thailand.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 4 times. Targeted ports: 13020. Country: United Kingdom. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Ukraine.
Observed 8 times. Targeted ports: 3129. Country: United States.
Observed 4 times. Targeted ports: 3129. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 8080. Country: France. Reputation: known attacker.
Observed 4 times. Targeted ports: 45204. Country: United Kingdom.
Observed 4 times. Targeted ports: 10361. Country: Hong Kong.
Observed 2 times. Targeted ports: 3306. Country: United States.
Observed 5 times. Targeted ports: 44344. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Targeted ports: 27406. Country: Brazil. Reputation: known attacker.
Observed 2 times. Targeted ports: 81. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 27017. Country: United States.
Observed 2 times. Targeted ports: 89. Country: China. Reputation: known attacker.
Observed 1 times. Targeted ports: 59914. Country: Philippines.
Observed 5 times. Targeted ports: 9407. Country: United States.
Observed 10 times. Targeted ports: 8040. Country: United States.
Observed 11 times. Targeted ports: 18019. Country: Germany. Reputation: known attacker.
Observed 2 times. Targeted ports: 81. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 1900. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 2049. Country: Belgium.
Observed 3 times. Targeted ports: 2049. Country: United States.
Observed 13 times. Targeted ports: 5904, 5913, 5934. Country: Seychelles.
Observed 11 times. Targeted ports: 80. Country: Brazil. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 4 times. Targeted ports: 4118. Country: United States.
Observed 1 times. Targeted ports: 55249. Country: Ecuador.
Observed 4 times. Targeted ports: 10442. Country: Russia.
Observed 5 times. Targeted ports: 45558. Country: United Kingdom. Reputation: known attacker.
Observed 5 times. Targeted ports: 48839. Country: United Kingdom.
Observed 4 times. Targeted ports: 47584. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 12334. Country: China.
Observed 8 times. Targeted ports: 12334. Country: China.
Observed 6 times. Targeted ports: 12334. Country: China.
Observed 5 times. Targeted ports: 12334. Country: China.
Observed 7 times. Targeted ports: 12334. Country: China.
Observed 66 times. Targeted ports: 1080. Country: United States.
Observed 4 times. Targeted ports: 5080. Country: Germany.
Observed 5 times. Targeted ports: 4091. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 2 times. Targeted ports: 13. Country: The Netherlands. Reputation: known attacker.
Observed 5 times. Targeted ports: 1223. Country: United States. Reputation: known attacker.
Observed 11 times. Targeted ports: 9242. Country: United Kingdom.
Observed 1 times. Targeted ports: 23. Country: South Korea. Reputation: known attacker.
Observed 4 times. Targeted ports: 30021. Country: United Kingdom.
Observed 3 times. Targeted ports: 20658, 24163, 32804. Country: United Kingdom.
Observed 4 times. Targeted ports: 2084. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 55432. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 8887. Country: United Kingdom.
Observed 1 times. Targeted ports: 9303. Country: Vietnam.
Observed 5 times. Targeted ports: 5555. Country: United States.
Observed 2 times. Targeted ports: 8080. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 13 times. Targeted ports: 1961. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 4841. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 8016. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 55391. Country: Mexico. Reputation: known attacker.
Observed 1 times. Targeted ports: 6505. Country: Brazil.
Observed 18 times. Targeted ports: 445. Country: China. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 444. Country: France. Reputation: known attacker.
Observed 1 times. Targeted ports: 23. Country: Bulgaria.
Observed 5 times. Targeted ports: 8083. Country: United States.
Observed 606 times. Targeted ports: 8443. Country: The Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
Observed 4 times. Targeted ports: 48188. Country: China. Reputation: known attacker.
Observed 4 times. Targeted ports: 10995. Country: The Netherlands.
Observed 2 times. Targeted ports: 131. Country: United States.
Observed 1 times. Country: United States.