Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 507,608 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 2 times. Targeted ports: 389. Country: Belgium.
Observed 6 times. Targeted ports: 143. Country: Belgium.
Observed 30 times. Targeted ports: 8880. Country: United States.
Observed 10 times. Targeted ports: 22. Country: South Korea. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 8 times. Targeted ports: 8443. Country: United States. Reputation: mass scanner.
Observed 18 times. Targeted ports: 8002. Country: Japan. Reputation: bad reputation.
Observed 8 times. Targeted ports: 22. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 4 times. Targeted ports: 4545. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 22. Country: United States.
Observed 6 times. Targeted ports: 19101. Country: China.
Observed 2 times. Targeted ports: 700. Country: Taiwan.
Observed 6 times. Targeted ports: 19101. Country: China.
Observed 8 times. Targeted ports: 19101. Country: China.
Observed 7 times. Targeted ports: 19101. Country: China.
Observed 7 times. Targeted ports: 19101. Country: China. Reputation: bad reputation.
Observed 25 times. Targeted ports: 9027. Country: Singapore. Reputation: bad reputation.
Observed 5 times. Targeted ports: 53. Country: United States. Reputation: bad reputation.
Observed 6 times. Targeted ports: 3000. Country: United States. Reputation: scan source.
Observed 28 times. Targeted ports: 9002. Country: Singapore. Reputation: bad reputation.
Observed 5 times. Targeted ports: 445. Country: Russia.
Observed 4 times. Targeted ports: 5999. Country: Nigeria. Reputation: bad reputation.
Observed 44 times. Targeted ports: 8087. Country: United States.
Observed 4 times. Targeted ports: 135. Country: Türkiye.
Observed 13 times. Targeted ports: 23. Country: Belgium.
Observed 4 times. Targeted ports: 8443. Country: United States. Reputation: bad reputation.
Observed 16 times. Targeted ports: 20594, 20599. Country: United Kingdom. Reputation: web abuse.
Observed 16 times. Targeted ports: 20578, 20587. Country: United Kingdom.
Observed 463 times. Targeted ports: 20583, 20585, 20589, 20595, 20596, 20600, 20604, 20609, 20612, 20615, 20621, 20625. Country: United Kingdom.
Observed 490 times. Targeted ports: 20579, 20588, 20590, 20592, 20597, 20602, 20611, 20614, 20616, 20617, 20618, 20622. Country: United Kingdom.
Observed 42 times. Targeted ports: 20624. Country: United Kingdom.
Observed 42 times. Targeted ports: 20593. Country: United Kingdom.
Observed 1 times. Country: Germany.
Observed 38 times. Targeted ports: 20580. Country: United Kingdom.
Observed 130 times. Targeted ports: 20578, 20581, 20582, 20583, 20585, 20586, 20587, 20589, 20593, 20595, 20596, 20598, 20600, 20601, 20603, 20604, 20607, 20608, 20609, 20612, 20613, 20615, 20619, 20620, 20621, 20623, 20624, 20625, 20626. Country: United Kingdom.
Observed 12 times. Targeted ports: 23. Country: South Korea. Reputation: service abuse.
Observed 6 times. Targeted ports: 22323. Country: China. Reputation: bad reputation.
Observed 3 times. Targeted ports: 5002. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 5555. Country: China. Reputation: bad reputation.
Observed 418 times. Targeted ports: 20628, 20629, 20630, 20634, 20639, 20647, 20650, 20651, 20662, 20664, 20675. Country: United Kingdom.
Observed 118 times. Targeted ports: 20628, 20629, 20630, 20633, 20634, 20637, 20639, 20640, 20641, 20644, 20645, 20647, 20650, 20651, 20653, 20656, 20657, 20660, 20662, 20663, 20664, 20665, 20667, 20669, 20670, 20674, 20675. Country: United Kingdom. Reputation: attack source.
Observed 4 times. Targeted ports: 4369. Country: United States. Reputation: bad reputation.
Observed 22 times. Targeted ports: 9869. Country: United States.
Observed 1 times. Targeted ports: 25565. Country: United States. Reputation: scan source.
Observed 27 times. Targeted ports: 8123. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 27019. Country: United States. Reputation: bad reputation.
Observed 8 times. Targeted ports: 443, 623. Country: The Netherlands.
Observed 1 times. Country: China.
Observed 2 times. Targeted ports: 26. Country: Hong Kong. Reputation: bad reputation.
Observed 8 times. Targeted ports: 23. Country: Brazil.
Observed 4 times. Targeted ports: 8030. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 3050. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 1521. Country: United States.
Observed 2 times. Targeted ports: 194. Country: United States. Reputation: bad reputation.
Observed 25 times. Targeted ports: 445. Country: Thailand. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 26 times. Targeted ports: 8095. Country: Germany. Reputation: bad reputation.
Observed 5 times. Targeted ports: 7443. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 49665. Country: Hong Kong. Reputation: bad reputation.
Observed 2 times. Targeted ports: 5060. Country: Spain.
Observed 2 times. Targeted ports: 8080. Country: Germany. Reputation: bad reputation.
Observed 5 times. Targeted ports: 4369. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 2087. Country: The Netherlands. Reputation: bad reputation.
Observed 5 times. Targeted ports: 445. Country: Malaysia.
Observed 4 times. Targeted ports: 22. Country: Belgium.
Observed 22 times. Targeted ports: 22. Country: Russia. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: bao, root.
Observed 1 times. Country: Taiwan.
Observed 5 times. Targeted ports: 2000. Country: United States. Reputation: bad reputation.
Observed 6 times. Targeted ports: 22. Country: Indonesia. Reputation: bad reputation.
Observed 7 times. Targeted ports: 21200. Country: Portugal. Reputation: scan source.
Observed 6 times. Targeted ports: 21200. Country: Portugal. Reputation: scan source.
Observed 2 times. Targeted ports: 22. Country: China. Reputation: ssh abuse.
Observed 1 times. Targeted ports: 5060. Country: Singapore.
Observed 1 times. Targeted ports: 53. Country: United States. Reputation: scan source.
Observed 15 times. Targeted ports: 443. Country: United States.
Observed 11 times. Targeted ports: 22, 23. Country: Cambodia.
Observed 4 times. Targeted ports: 55413. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 80. Country: Belgium.
Observed 6 times. Targeted ports: 6379. Country: Belgium.
Observed 4 times. Targeted ports: 6789. Country: Türkiye. Reputation: bad reputation.
Observed 5 times. Targeted ports: 445. Country: Ethiopia.
Observed 13 times. Targeted ports: 8980. Country: United States. Reputation: bad reputation.
Observed 142 times. Targeted ports: 3389. Country: United States. Alert categories: Generic Protocol Command Decode, Potentially Bad Traffic. Signatures: ET REMOTE_ACCESS Inbound RDP Connection with Minimal Security Protocol Requested, SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.
Observed 5 times. Targeted ports: 3389. Country: United States. Reputation: scan source.
Observed 1 times. Targeted ports: 11211. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 50100. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 2096. Country: United States.
Observed 2 times. Targeted ports: 3306. Country: United States.
Observed 4 times. Targeted ports: 5222. Country: United States. Reputation: bad reputation.
Observed 32 times. Targeted ports: 1434. Country: United States.
Observed 10 times. Targeted ports: 8088. Country: Germany. Reputation: bad reputation.
Observed 10 times. Targeted ports: 80. Country: Malaysia. Reputation: bad reputation.
Observed 5 times. Targeted ports: 8443. Country: Belgium.
Observed 4 times. Targeted ports: 7474. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 48998. Country: United Kingdom. Reputation: bad reputation.
Observed 1 times. Targeted ports: 5683. Country: China. Reputation: bad reputation.
Observed 1 times. Targeted ports: 82. Country: United States. Reputation: mass scanner.
Observed 38 times. Targeted ports: 20536. Country: United Kingdom.
Observed 386 times. Targeted ports: 20529, 20530, 20542, 20547, 20549, 20550, 20552, 20555, 20557, 20558, 20564. Country: United Kingdom.
Observed 24 times. Targeted ports: 12202. Country: Singapore. Reputation: bad reputation.
Observed 18 times. Targeted ports: 8580. Country: United States. Reputation: bad reputation.
Observed 40 times. Targeted ports: 20491, 20505, 20511, 20520, 20522. Country: United Kingdom.