Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 507,536 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 6 times. Targeted ports: 46867. Country: United Kingdom. Reputation: bad reputation.
Observed 12 times. Targeted ports: 44333. Country: United States.
Observed 1 times. Targeted ports: 13435. Country: Türkiye.
Observed 1 times. Country: Saudi Arabia.
Observed 4 times. Targeted ports: 445. Country: Mexico. Reputation: bad reputation.
Observed 1 times. Targeted ports: 28769. Country: Brazil.
Observed 1 times. Country: Brazil.
Observed 1 times. Targeted ports: 15150. Country: Brazil.
Observed 5 times. Targeted ports: 3986. Country: United Kingdom. Reputation: bad reputation.
Observed 13 times. Targeted ports: 8144. Country: Malaysia. Reputation: bad reputation.
Observed 1 times. Country: Thailand.
Observed 30 times. Targeted ports: 2105. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 30016. Country: Türkiye.
Observed 1 times. Targeted ports: 45709. Country: Türkiye.
Observed 1 times. Targeted ports: 46888. Country: Ireland. Reputation: bad reputation.
Observed 1 times. Targeted ports: 7200. Country: Türkiye.
Observed 1 times. Targeted ports: 8080. Country: United States. Reputation: bad reputation.
Observed 26 times. Targeted ports: 445. Country: Palestine. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 34 times. Targeted ports: 44818. Country: United States.
Observed 1 times. Targeted ports: 2244. Country: Ukraine.
Observed 1 times. Targeted ports: 44537. Country: United States.
Observed 4 times. Targeted ports: 5631. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 51659. Country: Brazil.
Observed 1 times. Targeted ports: 31856. Country: Türkiye.
Observed 20 times. Targeted ports: 1177. Country: United States.
Observed 22 times. Targeted ports: 8082. Country: The Netherlands.
Observed 2 times. Targeted ports: 995. Country: The Netherlands.
Observed 4 times. Targeted ports: 7210. Country: United States. Reputation: bad reputation.
Observed 19 times. Targeted ports: 60000. Country: India.
Observed 1 times. Targeted ports: 53532. Country: Brazil. Reputation: bad reputation.
Observed 1 times. Targeted ports: 62213. Country: Sweden.
Observed 1 times. Targeted ports: 35907. Country: Türkiye.
Observed 17 times. Targeted ports: 445. Country: Ecuador. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Targeted ports: 46451. Country: Ukraine.
Observed 1 times. Targeted ports: 34668. Country: Brazil.
Observed 4 times. Targeted ports: 9200. Country: United States.
Observed 4 times. Targeted ports: 7047. Country: China.
Observed 2 times. Targeted ports: 1433. Country: Mexico. Reputation: bad reputation.
Observed 4 times. Targeted ports: 3351. Country: United States. Reputation: bad reputation.
Observed 25 times. Targeted ports: 7574. Country: Singapore. Reputation: bad reputation.
Observed 21 times. Targeted ports: 1245. Country: United States.
Observed 4 times. Targeted ports: 7676. Country: Japan. Reputation: bad reputation.
Observed 2 times. Targeted ports: 58000. Country: France. Reputation: bot activity.
Observed 202 times. Targeted ports: 22, 80, 443, 444, 445, 666, 999, 1400, 1443, 1985, 4343, 4430, 4433, 4443, 4444, 5050, 6443, 7443, 8000, 8080, 8443, 9090, 9443, 10443, 11443, 20443, 30080. Country: United States. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.
Observed 25 times. Targeted ports: 8164. Country: Malaysia. Reputation: bad reputation.
Observed 9 times. Targeted ports: 2222. Country: China. Reputation: bad reputation. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
Observed 1 times. Targeted ports: 56475. Country: Türkiye.
Observed 4 times. Targeted ports: 2103. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 22. Country: Thailand.
Observed 92 times. Targeted ports: 80, 111, 137, 902, 1090, 2888, 4369, 4786, 5432, 5900, 8000, 8686, 9012, 27018, 27019, 47001. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 8080. Country: Spain. Reputation: bad reputation.
Observed 21 times. Targeted ports: 6931. Country: United States.
Observed 1 times. Targeted ports: 23018. Country: Brazil.
Observed 4 times. Targeted ports: 5236. Country: China.
Observed 1 times. Targeted ports: 12887. Country: The Netherlands. Reputation: bad reputation.
Observed 10 times. Targeted ports: 22. Country: Kuwait. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 7 times. Targeted ports: 2049. Country: United Kingdom. Reputation: bad reputation.
Observed 1 times. Targeted ports: 5060. Country: Germany.
Observed 5 times. Targeted ports: 42112. Country: United Kingdom. Reputation: bad reputation.
Observed 1 times. Targeted ports: 23. Country: Germany.
Observed 14 times. Targeted ports: 20336, 20469, 20570, 20928, 20949. Country: The Netherlands. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with invalid ack, SURICATA STREAM SHUTDOWN RST invalid ack, SURICATA STREAM spurious retransmission.
Observed 29 times. Targeted ports: 80. Country: Nigeria.
Observed 4 times. Targeted ports: 2095. Country: United Kingdom. Reputation: bad reputation.
Observed 26 times. Targeted ports: 2080. Country: United States.
Observed 1 times. Targeted ports: 31189. Country: Mexico.
Observed 1 times. Targeted ports: 34335. Country: Brazil. Reputation: bad reputation.
Observed 11 times. Targeted ports: 22, 23. Country: Mexico.
Observed 4 times. Targeted ports: 4190. Country: Japan. Reputation: bad reputation.
Observed 7 times. Targeted ports: 6000. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 2080. Country: Canada. Reputation: bad reputation.
Observed 19 times. Targeted ports: 9000. Country: United States.
Observed 4 times. Targeted ports: 22. Country: United States. Reputation: compromised.
Observed 24 times. Targeted ports: 8022. Country: Singapore. Reputation: bad reputation.
Observed 5 times. Targeted ports: 1433. Country: Kenya. Reputation: bad reputation.
Observed 18 times. Targeted ports: 8001. Country: Malaysia. Reputation: bad reputation.
Observed 26 times. Targeted ports: 12237. Country: Hong Kong. Reputation: bad reputation.
Observed 6 times. Targeted ports: 17998. Country: United Kingdom.
Observed 1 times. Targeted ports: 21748. Country: Türkiye.
Observed 13 times. Targeted ports: 23. Country: Vietnam.
Observed 1 times. Targeted ports: 27982. Country: Germany.
Observed 24 times. Targeted ports: 445, 1433. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 14 times. Targeted ports: 22. Country: Togo.
Observed 5 times. Targeted ports: 6113. Country: United Kingdom. Reputation: bad reputation.
Observed 6 times. Targeted ports: 6113. Country: United Kingdom. Reputation: bad reputation.
Observed 21 times. Targeted ports: 6789. Country: United States.
Observed 18 times. Targeted ports: 30001. Country: Germany. Reputation: bad reputation.
Observed 12 times. Targeted ports: 5032. Country: United States.
Observed 1 times. Targeted ports: 5871. Country: Türkiye.
Observed 4 times. Targeted ports: 2101. Country: United States.
Observed 4 times. Targeted ports: 47808. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 49155. Country: United Kingdom. Reputation: bad reputation.
Observed 5 times. Targeted ports: 9090. Country: United Kingdom. Reputation: bad reputation.
Observed 4 times. Targeted ports: 8980. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 9100. Country: Japan. Reputation: bad reputation.
Observed 19 times. Targeted ports: 8087. Country: United States.
Observed 5 times. Targeted ports: 1097. Country: United Kingdom. Reputation: bad reputation.
Observed 22 times. Targeted ports: 22, 23. Country: Spain.
Observed 4 times. Targeted ports: 3307. Country: United States.
Observed 11 times. Targeted ports: 19000. Country: Germany. Reputation: bad reputation.
Observed 13 times. Targeted ports: 23. Country: China.