Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 506,473 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 2 times. Targeted ports: 48067. Country: Japan. Reputation: bad reputation.
Observed 2 times. Targeted ports: 1962. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 3306. Country: United States. Reputation: bad reputation.
Observed 6 times. Targeted ports: 443. Country: United States.
Observed 17 times. Targeted ports: 22, 23. Country: Bangladesh.
Observed 24 times. Targeted ports: 9036. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 1723. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 443. Country: United States.
Observed 24 times. Targeted ports: 50105. Country: United States. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM ESTABLISHED SYN resend with different seq, SURICATA STREAM Packet with broken ack.
Observed 4 times. Targeted ports: 12403. Country: China.
Observed 4 times. Targeted ports: 4786. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 27218. Country: United Kingdom. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 22 times. Targeted ports: 2443. Country: United States.
Observed 20 times. Targeted ports: 4343. Country: United States.
Observed 2 times. Targeted ports: 8080. Country: Singapore. Reputation: bad reputation.
Observed 1 times. Country: Ireland.
Observed 5 times. Targeted ports: 7199. Country: United States. Reputation: bad reputation.
Observed 8 times. Targeted ports: 22, 23. Country: Argentina.
Observed 6 times. Targeted ports: 8086. Country: United States.
Observed 10 times. Targeted ports: 22. Country: Russia. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: support.
Observed 19 times. Targeted ports: 6666. Country: United States.
Observed 13 times. Targeted ports: 50313. Country: United States. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM ESTABLISHED SYN resend with different seq, SURICATA STREAM Packet with broken ack.
Observed 2 times. Targeted ports: 264. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 541. Country: United States. Reputation: bad reputation.
Observed 322 times. Targeted ports: 24080, 24081, 24084, 24146, 24149, 24297, 24346, 24392, 24413, 24445, 24447, 24459, 24510. Country: United Kingdom.
Observed 556 times. Targeted ports: 24092, 24102, 24132, 24134, 24156, 24158, 24180, 24187, 24210, 24230, 24256, 24292, 24319, 24360, 24372, 24399, 24404, 24409, 24499, 24502, 24508, 24539, 24541, 24548, 24552. Country: United Kingdom. Reputation: attack source.
Observed 824 times. Targeted ports: 24076, 24086, 24088, 24105, 24106, 24111, 24116, 24147, 24163, 24174, 24181, 24183, 24201, 24205, 24234, 24247, 24253, 24260, 24290, 24300, 24303, 24331, 24334, 24364, 24373, 24385, 24396, 24397, 24432, 24448, 24475, 24477, 24480, 24498, 24509, 24526, 24527, 24540, 24558, 24570. Country: United Kingdom.
Observed 860 times. Targeted ports: 24066, 24079, 24096, 24110, 24118, 24120, 24135, 24148, 24150, 24152, 24159, 24164, 24177, 24184, 24193, 24194, 24207, 24228, 24236, 24237, 24241, 24244, 24245, 24251, 24269, 24282, 24286, 24294, 24296, 24322, 24323, 24340, 24383, 24427, 24433, 24444, 24455, 24456, 24462, 24486, 24491, 24494, 24513, 24528. Country: United Kingdom.
Observed 1030 times. Targeted ports: 24069, 24071, 24074, 24124, 24129, 24139, 24144, 24173, 24182, 24202, 24206, 24208, 24211, 24219, 24222, 24224, 24261, 24268, 24273, 24304, 24313, 24333, 24339, 24341, 24349, 24350, 24359, 24361, 24378, 24384, 24386, 24402, 24434, 24438, 24454, 24464, 24467, 24473, 24476, 24478, 24481, 24489, 24507, 24521, 24524, 24525, 24535, 24554, 24557, 24559, 24575. Country: United Kingdom.
Observed 775 times. Targeted ports: 24078, 24099, 24107, 24121, 24127, 24128, 24133, 24137, 24142, 24169, 24220, 24242, 24254, 24265, 24280, 24284, 24299, 24330, 24335, 24345, 24358, 24368, 24375, 24381, 24387, 24403, 24407, 24416, 24422, 24424, 24461, 24514, 24542, 24549, 24556, 24563, 24569, 24574. Country: United Kingdom.
Observed 846 times. Targeted ports: 24065, 24072, 24087, 24089, 24091, 24097, 24122, 24191, 24200, 24209, 24212, 24216, 24227, 24240, 24262, 24264, 24272, 24276, 24289, 24301, 24326, 24352, 24354, 24355, 24357, 24379, 24390, 24393, 24395, 24418, 24420, 24452, 24479, 24493, 24496, 24500, 24550, 24562, 24564, 24568. Country: United Kingdom. Reputation: attack source.
Observed 323 times. Targeted ports: 24115, 24167, 24175, 24197, 24213, 24336, 24344, 24430, 24440, 24465, 24505, 24517, 24533, 24572. Country: United Kingdom.
Observed 341 times. Targeted ports: 24125, 24126, 24165, 24233, 24278, 24312, 24366, 24423, 24439, 24449, 24488, 24503, 24519, 24523, 24566. Country: United Kingdom.
Observed 71 times. Targeted ports: 24166, 24250, 24458. Country: United Kingdom.
Observed 329 times. Targeted ports: 24119, 24143, 24168, 24198, 24249, 24285, 24295, 24337, 24405, 24437, 24516, 24529, 24536, 24565. Country: United Kingdom.
Observed 489 times. Targeted ports: 24145, 24186, 24229, 24231, 24232, 24238, 24288, 24342, 24347, 24351, 24363, 24367, 24369, 24398, 24421, 24436, 24468, 24472, 24487, 24492, 24571. Country: United Kingdom.
Observed 23 times. Targeted ports: 24176. Country: United Kingdom.
Observed 19 times. Targeted ports: 22, 23. Country: Tunisia.
Observed 2064 times. Targeted ports: 24070, 24077, 24082, 24083, 24112, 24114, 24117, 24130, 24151, 24155, 24170, 24179, 24190, 24195, 24196, 24199, 24203, 24217, 24263, 24281, 24283, 24287, 24293, 24307, 24315, 24338, 24348, 24353, 24371, 24388, 24394, 24419, 24446, 24453, 24457, 24482, 24495, 24504, 24522, 24532, 24538, 24544, 24546, 24573. Country: United Kingdom.
Observed 156 times. Targeted ports: 24113, 24314, 24380, 24474. Country: United Kingdom.
Observed 116 times. Targeted ports: 24298, 24460, 24530. Country: United Kingdom.
Observed 377 times. Targeted ports: 24067, 24136, 24140, 24188, 24192, 24252, 24389, 24406, 24490, 24518. Country: United Kingdom.
Observed 308 times. Targeted ports: 24094, 24101, 24178, 24215, 24309, 24310, 24318, 24408. Country: United Kingdom. Reputation: attack source.
Observed 190 times. Targeted ports: 24189, 24255, 24401, 24483, 24511. Country: United Kingdom.
Observed 84 times. Targeted ports: 24109, 24185. Country: United Kingdom.
Observed 2 times. Targeted ports: 23. Country: Taiwan.
Observed 4 times. Targeted ports: 3000. Country: United States. Reputation: scan source.
Observed 2 times. Targeted ports: 1433. Country: Kenya. Reputation: bad reputation.
Observed 4 times. Targeted ports: 5007. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 16662. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 2096. Country: United States. Reputation: scan source.
Observed 2 times. Targeted ports: 5060. Country: Singapore. Reputation: bad reputation.
Observed 4 times. Targeted ports: 4343. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 52230. Country: United Arab Emirates.
Observed 1 times. Targeted ports: 8087. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 1356. Country: France. Reputation: mass scanner.
Observed 1 times. Country: France.
Observed 1 times. Country: The Netherlands.
Observed 2 times. Targeted ports: 8080. Country: The Netherlands.
Observed 10 times. Targeted ports: 22. Country: Italy. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: root.
Observed 188 times. Targeted ports: 24065, 24072, 24081, 24084, 24089, 24091, 24097, 24122, 24146, 24149, 24160, 24176, 24191, 24200, 24209, 24212, 24216, 24227, 24248, 24264, 24276, 24301, 24326, 24352, 24354, 24355, 24357, 24390, 24392, 24393, 24395, 24413, 24414, 24420, 24445, 24447, 24452, 24493, 24496, 24500, 24510, 24550, 24562, 24564, 24568. Country: United Kingdom.
Observed 11 times. Targeted ports: 6466. Country: Malaysia. Reputation: bad reputation.
Observed 1 times. Country: China.
Observed 4 times. Targeted ports: 22. Country: Singapore.
Observed 4 times. Targeted ports: 9529. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 23. Country: China.
Observed 2 times. Targeted ports: 23. Country: Ukraine.
Observed 9 times. Targeted ports: 22, 23. Country: Argentina.
Observed 1 times. Targeted ports: 3389. Country: Iran. Reputation: bad reputation.
Observed 21 times. Targeted ports: 50995. Country: United States.
Observed 6 times. Targeted ports: 57066. Country: United States. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 11 times. Targeted ports: 1194. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 23. Country: Argentina.
Observed 2 times. Targeted ports: 50150. Country: United States. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 4 times. Targeted ports: 30234. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 5060. Country: The Netherlands. Reputation: bad reputation.
Observed 5 times. Targeted ports: 22. Country: United States. Reputation: scan source.
Observed 2 times. Targeted ports: 23. Country: Russia.
Observed 1 times. Country: France.
Observed 4 times. Targeted ports: 10443. Country: Russia. Reputation: bad reputation.
Observed 1 times. Country: China.
Observed 4 times. Targeted ports: 50995. Country: United States. Reputation: scan source.
Observed 5 times. Targeted ports: 443. Country: United States.
Observed 45 times. Targeted ports: 27987. Country: United States. Reputation: bad reputation.
Observed 1 times. Targeted ports: 28570. Country: United States. Reputation: scan source. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
Observed 11 times. Targeted ports: 3104. Country: United States.
Observed 7 times. Targeted ports: 22, 23. Country: France.
Observed 2 times. Targeted ports: 23. Country: Taiwan.
Observed 9 times. Targeted ports: 22, 23. Country: Brazil.
Observed 1 times. Country: United Kingdom.
Observed 3 times. Targeted ports: 3128. Country: United States.
Observed 10 times. Targeted ports: 445. Country: Belgium. Reputation: bad reputation.
Observed 3 times. Targeted ports: 445. Country: United States.
Observed 2 times. Targeted ports: 23. Country: Brazil.
Observed 1 times. Country: France.
Observed 32 times. Targeted ports: 9001. Country: United States.
Observed 3 times. Targeted ports: 20917. Country: Bulgaria. Reputation: scan source.
Observed 10 times. Targeted ports: 80. Country: Germany.
Observed 2 times. Targeted ports: 22. Country: Czechia. Reputation: ssh abuse.
Observed 2 times. Targeted ports: 139. Country: United States. Reputation: bad reputation.