Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 434,925 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 22. Country: Germany. Reputation: known attacker.
Observed 5 times. Targeted ports: 12000. Country: United States.
Observed 8 times. Targeted ports: 12000. Country: United States.
Observed 4 times. Targeted ports: 1095. Country: Germany. Reputation: known attacker.
Observed 23 times. Targeted ports: 2000, 39960, 47541. Country: United States.
Observed 11 times. Targeted ports: 23. Country: United States. Reputation: known attacker.
Observed 20 times. Targeted ports: 23. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 1194. Country: Japan. Reputation: known attacker.
Observed 4 times. Targeted ports: 1604. Country: Germany. Reputation: known attacker.
Observed 1 times. Targeted ports: 123. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 23. Country: Belgium.
Observed 11 times. Targeted ports: 23. Country: United States. Reputation: known attacker.
Observed 2 times. Targeted ports: 1433. Country: India.
Observed 1 times. Targeted ports: 2222. Country: United States.
Observed 10 times. Targeted ports: 8500. Country: Germany. Reputation: known attacker.
Observed 5 times. Targeted ports: 2222. Country: United States.
Observed 4 times. Targeted ports: 3333. Country: United States. Reputation: known attacker.
Observed 40 times. Targeted ports: 8500. Country: Germany.
Observed 2 times. Targeted ports: 135. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 808. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 27293. Country: China.
Observed 7 times. Targeted ports: 5901. Country: United Arab Emirates. Reputation: known attacker.
Observed 8 times. Targeted ports: 12908. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 9008. Country: United Kingdom. Reputation: known attacker.
Observed 1 times. Targeted ports: 47350. Country: China.
Observed 3 times. Targeted ports: 22, 23. Country: Canada.
Observed 21 times. Targeted ports: 445. Country: Chile. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 16001. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 4782. Country: France. Reputation: mass scanner.
Observed 1 times. Targeted ports: 623. Country: China.
Observed 4 times. Targeted ports: 2031. Country: United States. Reputation: mass scanner.
Observed 15 times. Targeted ports: 2000. Country: United States.
Observed 5 times. Targeted ports: 53524. Country: United States. Reputation: known attacker.
Observed 13 times. Targeted ports: 8389. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 42713. Country: United States. Reputation: known attacker.
Observed 6 times. Targeted ports: 57722. Country: United States. Reputation: mass scanner. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 5 times. Targeted ports: 8389. Country: United States. Reputation: mass scanner.
Observed 2 times. Targeted ports: 3306. Country: United States.
Observed 4 times. Targeted ports: 57722. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 5938. Country: United States. Reputation: mass scanner.
Observed 30 times. Targeted ports: 10024. Country: Hong Kong. Reputation: known attacker.
Observed 5 times. Targeted ports: 4341. Country: United Kingdom.
Observed 3 times. Targeted ports: 5938. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 443. Country: United Kingdom. Reputation: known attacker.
Observed 6 times. Targeted ports: 2222. Country: China.
Observed 1 times. Targeted ports: 45227. Country: Morocco.
Observed 1 times. Targeted ports: 5488. Country: United Kingdom. Reputation: known attacker.
Observed 2 times. Targeted ports: 6881. Country: France. Reputation: mass scanner.
Observed 2 times. Targeted ports: 6881. Country: United States. Reputation: mass scanner.
Observed 2 times. Targeted ports: 500. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 9222. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 5222. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 3128. Country: Singapore. Reputation: known attacker.
Observed 30 times. Targeted ports: 2080. Country: Hong Kong.
Observed 5 times. Targeted ports: 41568. Country: Slovenia.
Observed 4 times. Targeted ports: 20122. Country: United States. Reputation: known attacker.
Observed 4 times. Targeted ports: 9881. Country: United States.
Observed 1 times. Targeted ports: 12746. Country: United States. Reputation: known attacker.
Observed 12 times. Targeted ports: 27019. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 34620. Country: Nepal.
Observed 1 times. Targeted ports: 46740. Country: Brazil.
Observed 8 times. Targeted ports: 3060. Country: United States. Reputation: known attacker.
Observed 3 times. Targeted ports: 8001. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 32414. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 49169. Country: United Kingdom. Reputation: known attacker.
Observed 4 times. Targeted ports: 8001. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 808. Country: Japan. Reputation: known attacker.
Observed 64 times. Targeted ports: 4000. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 18 times. Targeted ports: 3115. Country: United States. Reputation: known attacker.
Observed 5 times. Targeted ports: 4911. Country: United States.
Observed 1 times. Country: United States.
Observed 5 times. Targeted ports: 52590. Country: United States. Reputation: known attacker.
Observed 40 times. Targeted ports: 80. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack, SURICATA STREAM SYN resend, SURICATA STREAM spurious retransmission.
Observed 6 times. Targeted ports: 80. Country: Belgium.
Observed 12 times. Targeted ports: 80. Country: Belgium.
Observed 1 times. Targeted ports: 1433. Country: Brazil.
Observed 5 times. Targeted ports: 4000. Country: United States. Reputation: known attacker.
Observed 1 times. Targeted ports: 26069. Country: Colombia.
Observed 2 times. Targeted ports: 23. Country: United States.
Observed 5 times. Targeted ports: 8010. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 22. Country: China. Reputation: known attacker.
Observed 4 times. Targeted ports: 5888. Country: China.
Observed 3 times. Targeted ports: 8010. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 8800. Country: United Kingdom. Reputation: known attacker.
Observed 5 times. Targeted ports: 14403. Country: United States.
Observed 5 times. Targeted ports: 48983. Country: United Kingdom.
Observed 3 times. Targeted ports: 9999. Country: United States. Reputation: mass scanner.
Observed 3 times. Targeted ports: 28784. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 5683. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 10001. Country: United States. Reputation: known attacker.
Observed 8 times. Targeted ports: 22666. Country: Switzerland.
Observed 1 times. Targeted ports: 8080. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 8233. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 5 times. Targeted ports: 23. Country: Belgium.
Observed 7 times. Targeted ports: 8005. Country: Hong Kong.
Observed 4 times. Targeted ports: 22. Country: United States. Reputation: known attacker.
Observed 19 times. Targeted ports: 445. Country: Bangladesh. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 4 times. Targeted ports: 49717. Country: United States. Reputation: known attacker.