Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 506,824 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 53 times. Targeted ports: 22588, 22589, 22591, 22593, 22594, 22602, 22605, 22608, 22611, 22622, 22628, 22633, 22634. Country: United Kingdom.
Observed 22 times. Targeted ports: 7, 13, 17, 19, 37, 42, 53, 69, 80, 88, 4433. Country: United Kingdom.
Observed 5 times. Targeted ports: 12169. Country: Singapore. Reputation: bad reputation.
Observed 5 times. Targeted ports: 53. Country: Belgium.
Observed 2 times. Targeted ports: 502. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 39700. Country: United States.
Observed 4 times. Targeted ports: 30005. Country: Nigeria. Reputation: bad reputation.
Observed 767 times. Targeted ports: 22443, 22444, 22445, 22448, 22450, 22451, 22452, 22455, 22457, 22458, 22460, 22464, 22467, 22470, 22474, 22478, 22483, 22484, 22487. Country: United Kingdom.
Observed 240 times. Targeted ports: 22441, 22472, 22473, 22475, 22477, 22488. Country: United Kingdom.
Observed 501 times. Targeted ports: 22440, 22442, 22446, 22447, 22449, 22461, 22463, 22469, 22480, 22481, 22482, 22485, 22486. Country: United Kingdom.
Observed 43 times. Targeted ports: 22465. Country: United Kingdom.
Observed 43 times. Targeted ports: 22453. Country: United Kingdom.
Observed 233 times. Targeted ports: 22454, 22456, 22459, 22466, 22471, 22476. Country: United Kingdom.
Observed 5 times. Targeted ports: 22222. Country: Hong Kong. Reputation: service abuse.
Observed 72 times. Targeted ports: 22440, 22441, 22442, 22452, 22453, 22455, 22462, 22463, 22464, 22472, 22473, 22474, 22475, 22477, 22480, 22486, 22488. Country: United Kingdom.
Observed 2 times. Targeted ports: 23. Country: Brazil.
Observed 26 times. Targeted ports: 445. Country: Vietnam. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 2701. Country: United States. Reputation: scan source.
Observed 19 times. Targeted ports: 15000. Country: United States.
Observed 1 times. Country: United States.
Observed 5 times. Targeted ports: 5552. Country: Belgium.
Observed 1 times. Targeted ports: 27015. Country: China. Reputation: bad reputation.
Observed 6 times. Targeted ports: 1707. Country: The Netherlands. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 4 times. Targeted ports: 9200. Country: United States. Reputation: bad reputation.
Observed 1 times. Country: United States.
Observed 1 times. Country: China.
Observed 1 times. Targeted ports: 23. Country: South Korea. Reputation: bad reputation.
Observed 11 times. Targeted ports: 9025. Country: Japan. Reputation: bad reputation.
Observed 16 times. Targeted ports: 445. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 427. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 2501. Country: China.
Observed 4 times. Targeted ports: 4200. Country: United States. Reputation: bad reputation.
Observed 138 times. Targeted ports: 22569, 22585, 22586. Country: United Kingdom.
Observed 42 times. Targeted ports: 22539. Country: United Kingdom.
Observed 42 times. Targeted ports: 22564. Country: United Kingdom.
Observed 81 times. Targeted ports: 22543, 22547. Country: United Kingdom.
Observed 42 times. Targeted ports: 22581. Country: United Kingdom.
Observed 79 times. Targeted ports: 22556, 22571. Country: United Kingdom.
Observed 123 times. Targeted ports: 22540, 22546, 22550. Country: United Kingdom.
Observed 117 times. Targeted ports: 22551, 22555, 22558. Country: United Kingdom.
Observed 119 times. Targeted ports: 22570, 22575, 22580. Country: United Kingdom.
Observed 42 times. Targeted ports: 22545. Country: United Kingdom.
Observed 120 times. Targeted ports: 22541, 22562, 22566. Country: United Kingdom. Reputation: attack source.
Observed 4 times. Targeted ports: 20000. Country: Japan. Reputation: bad reputation.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 5 times. Targeted ports: 7015. Country: United Kingdom. Reputation: bad reputation.
Observed 6 times. Targeted ports: 1080. Country: United States.
Observed 14 times. Targeted ports: 9200. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 28622. Country: United Kingdom. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 25 times. Targeted ports: 22543, 22545, 22547, 22548, 22571, 22584. Country: United Kingdom.
Observed 25 times. Targeted ports: 445. Country: Belgium. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1623 times. Targeted ports: 22489, 22490, 22491, 22493, 22494, 22495, 22496, 22497, 22498, 22499, 22500, 22502, 22503, 22504, 22506, 22508, 22510, 22511, 22512, 22513, 22514, 22515, 22516, 22517, 22518, 22521, 22522, 22523, 22524, 22525, 22526, 22527, 22528, 22529, 22531, 22533, 22534, 22536, 22537. Country: United Kingdom.
Observed 9 times. Targeted ports: 5353. Country: United States. Reputation: bad reputation.
Observed 29 times. Targeted ports: 22498, 22503, 22509, 22520, 22521, 22531, 22533. Country: United Kingdom.
Observed 26 times. Targeted ports: 445. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 2 times. Targeted ports: 123. Country: United States. Reputation: scan source.
Observed 23 times. Targeted ports: 8050. Country: United Kingdom.
Observed 10 times. Targeted ports: 6011. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 20155. Country: France. Reputation: mass scanner.
Observed 3 times. Targeted ports: 2222. Country: Seychelles. Reputation: bad reputation.
Observed 6 times. Targeted ports: 27017. Country: United States.
Observed 1 times. Targeted ports: 427. Country: United States. Reputation: scan source.
Observed 12 times. Targeted ports: 22. Country: United States. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM Packet with invalid timestamp, SURICATA STREAM spurious retransmission.
Observed 5 times. Targeted ports: 4782. Country: Belgium.
Observed 1 times. Targeted ports: 6881. Country: United States. Reputation: scan source.
Observed 32 times. Targeted ports: 8090. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 143. Country: Belgium.
Observed 3 times. Targeted ports: 3395. Country: Bulgaria. Reputation: bad reputation.
Observed 5 times. Targeted ports: 3389. Country: Thailand. Reputation: bad reputation.
Observed 5 times. Targeted ports: 18482. Country: United States. Reputation: bad reputation.
Observed 53 times. Targeted ports: 9200. Country: United States.
Observed 6 times. Targeted ports: 31378. Country: United States. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 6 times. Targeted ports: 135. Country: Indonesia.
Observed 14 times. Targeted ports: 445. Country: Belgium.
Observed 4 times. Targeted ports: 50050. Country: United States. Reputation: bad reputation.
Observed 12 times. Targeted ports: 22, 23. Country: United States. Reputation: service abuse.
Observed 2 times. Targeted ports: 23. Country: Ukraine. Reputation: service abuse.
Observed 4 times. Targeted ports: 50050. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 85. Country: United States. Reputation: bad reputation.
Observed 5 times. Targeted ports: 18245. Country: United States. Reputation: bad reputation.
Observed 21 times. Targeted ports: 6936. Country: United States.
Observed 19 times. Targeted ports: 6443. Country: United States.
Observed 4 times. Targeted ports: 2095. Country: Japan. Reputation: bad reputation.
Observed 4 times. Targeted ports: 21276. Country: Singapore. Reputation: bad reputation.
Observed 6 times. Targeted ports: 2222. Country: China. Reputation: ssh abuse.
Observed 3 times. Targeted ports: 20000. Country: United States. Reputation: scan source.
Observed 11 times. Targeted ports: 5105. Country: Hong Kong. Reputation: bad reputation.
Observed 2 times. Targeted ports: 771. Country: United States. Reputation: bad reputation.
Observed 27 times. Targeted ports: 20022. Country: United States. Reputation: bad reputation.
Observed 80 times. Targeted ports: 22323, 22340. Country: United Kingdom.
Observed 12 times. Targeted ports: 445, 65533. Country: Pakistan.
Observed 12 times. Targeted ports: 4432. Country: United States.
Observed 1 times. Targeted ports: 873. Country: Canada. Reputation: bad reputation.
Observed 27 times. Targeted ports: 31337. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.
Observed 3 times. Targeted ports: 443. Country: China.
Observed 7 times. Targeted ports: 9080. Country: Portugal. Reputation: bad reputation.
Observed 6 times. Targeted ports: 9080. Country: Portugal. Reputation: bad reputation.
Observed 5 times. Targeted ports: 8550. Country: United States. Reputation: scan source.
Observed 3 times. Targeted ports: 3000. Country: United States. Reputation: mass scanner.
Observed 3 times. Targeted ports: 9080. Country: Portugal. Reputation: bad reputation.