Honeypot infrastructure watch
A community-maintained watchlist of IP infrastructure observed through honeypot telemetry. Historical observations include original tags, hit counts, and first/last-seen dates.
IOC feed · 505,486 indicators
Latest indicators
Live indicator delivery for this feed.
Observed 5 times. Targeted ports: 25. Country: Brazil. Reputation: scan source.
Observed 13 times. Targeted ports: 4752, 14348, 17602, 20250, 28075, 28152, 28314, 28472, 30553, 31323, 45210, 54667, 62179. Country: Canada. Reputation: scan source.
Observed 6 times. Targeted ports: 24577. Country: France. Reputation: mass scanner.
Observed 24 times. Targeted ports: 9096. Country: Singapore. Reputation: bad reputation.
Observed 3 times. Targeted ports: 5801. Country: United States. Reputation: scan source.
Observed 1051 times. Targeted ports: 1403, 1670, 1860, 1861, 2126, 2781, 3642, 3752, 3778, 4016, 4269, 4494, 4673, 4720, 5067, 6193, 6507, 7762, 8111, 8534, 8772, 8773, 9121, 9674, 9972, 9973, 10656, 10908, 11120, 11173, 11597, 11945, 12335, 12785, 13583, 13746, 13747, 14108, 14225, 14279, 14294, 14464, 14573, 14729, 14989, 15186, 16039, 16347, 16360, 16402, 16783, 16812, 16906, 16919, 17077, 17855, 19315, 19329, 19369, 19370, 19397, 19887, 20277, 20569, 20570, 20917, 20918, 20919, 21771, 22372, 22809, 23000, 25183, 25586, 25606, 27270, 27271, 27277, 29530, 29810, 30034, 30792, 31044, 31420, 32136, 32511, 32512, 32513, 32606, 32621, 32634, 32901, 33282, 33808, 34749, 34953, 35642, 35684, 36005, 36592, 36647, 36776, 36873, 37246, 37376, 37377, 38367, 38633, 38858, 39136, 40312, 40379, 40733, 41443, 41600, 41709, 42255, 42692, 42698, 42884, 43750, 44152, 44588, 44589, 44644, 45054, 45318, 45438, 45524, 45696, 45789, 47496, 48506, 48963, 48964, 49973, 50902, 50935, 51227, 51678, 51801, 52102, 52320, 52333, 52449, 52476, 52518, 52948, 53227, 53465, 53514, 53520, 53542, 53647, 56038, 56039, 56182, 56332, 56517, 56755, 56757, 56811, 57089, 57437, 57438, 57663, 57757, 57813, 58385, 58905, 59075, 60570, 60597, 60979, 61212, 61327, 61421, 61778, 61886, 62303, 62372, 63311, 63450, 63783, 63845, 64712. Country: Canada. Reputation: scan source.
Observed 1330 times. Targeted ports: 1109, 1751, 2004, 2208, 2351, 2434, 2658, 3041, 3217, 3580, 3669, 3723, 4215, 4603, 4815, 4999, 5682, 5695, 6828, 7244, 7709, 7973, 8267, 8309, 8616, 8655, 9161, 9399, 10294, 10491, 10492, 10600, 10630, 10724, 10771, 10949, 11078, 11106, 11242, 13188, 13666, 13843, 13868, 14122, 14586, 15092, 15145, 15650, 15719, 15842, 15843, 15868, 16108, 16968, 17076, 17250, 17424, 17704, 18251, 18278, 18359, 18361, 18639, 18640, 19226, 19547, 19607, 20010, 20148, 20167, 22146, 22371, 22932, 22945, 23690, 23797, 23813, 23915, 23969, 24425, 24890, 25154, 25155, 25340, 25504, 25675, 25688, 26329, 26794, 27183, 27407, 27421, 27927, 28315, 28451, 28485, 28526, 28539, 28540, 29475, 30444, 30730, 30764, 30983, 31057, 31085, 31365, 31379, 31583, 32676, 32791, 32831, 33085, 33111, 33126, 33139, 33378, 33589, 33726, 34435, 35698, 35951, 36510, 36674, 36736, 36789, 37724, 37794, 38285, 38524, 38537, 39390, 40032, 40175, 40775, 40979, 41163, 41226, 41375, 41388, 41389, 41512, 41613, 41669, 41683, 41907, 42072, 42086, 42227, 42645, 43853, 44098, 44480, 45386, 45415, 45666, 45776, 45920, 46098, 46494, 46881, 46896, 47359, 47401, 47857, 47973, 48423, 49734, 50491, 51173, 51412, 51903, 51904, 51918, 52505, 52573, 52574, 52729, 52996, 53173, 53453, 53651, 53652, 53664, 53848, 53889, 53890, 54053, 54209, 54347, 54387, 55007, 55009, 55201, 55480, 55493, 55943, 55944, 56518, 56556, 57008, 57478, 57772, 57820, 57929, 58209, 58742, 58756, 58967, 59314, 59328, 60079, 60221, 60391, 60475, 60501, 60753, 61075, 61087, 61381, 61648, 62023, 62598, 62970, 63743, 64262, 64513, 64636, 64658, 64664, 65005, 65087, 65379, 65380, 65394. Country: Canada. Reputation: scan source.
Observed 5 times. Targeted ports: 445. Country: Belgium.
Observed 838 times. Targeted ports: 1922, 2488, 3388, 3566, 4447, 5190, 5511, 5566, 5905, 6138, 6186, 7646, 10144, 10150, 10506, 10669, 10717, 11189, 11202, 11884, 11891, 13466, 14054, 14402, 15023, 15943, 16362, 16504, 17453, 17608, 17609, 18236, 18475, 18503, 18796, 19801, 20360, 21492, 21662, 21853, 21969, 22249, 22357, 22822, 22836, 23264, 23449, 23676, 24024, 24331, 25224, 25689, 25914, 26649, 27810, 27911, 27981, 28874, 28889, 29235, 29236, 30206, 30539, 32484, 33296, 33309, 33488, 33501, 33596, 33658, 34006, 34899, 35350, 35500, 35896, 37191, 37615, 37819, 38113, 39614, 41218, 41668, 41724, 41778, 42412, 42536, 42575, 42630, 42816, 42829, 43559, 44001, 44759, 44760, 45025, 45039, 45558, 45680, 46145, 46410, 46411, 46587, 46588, 47454, 48717, 49051, 49119, 49121, 49508, 49652, 50996, 51985, 51986, 53010, 53596, 53759, 53822, 54141, 54142, 54573, 54892, 56448, 56585, 56639, 57104, 57532, 57540, 57541, 57576, 57806, 58292, 58346, 58836, 58850, 59157, 59546, 60105, 60182, 60420, 61484, 62794, 63033, 64909. Country: Canada. Reputation: scan source.
Observed 4 times. Targeted ports: 53300. Country: United States. Reputation: scan source.
Observed 1 times. Country: United States.
Observed 4 times. Targeted ports: 3389. Country: United States. Reputation: bad reputation.
Observed 13 times. Targeted ports: 18245, 50005. Country: United States. Reputation: scan source.
Observed 1 times. Targeted ports: 9997. Country: United States. Reputation: scan source.
Observed 5 times. Targeted ports: 10025. Country: United States. Reputation: bad reputation.
Observed 12 times. Targeted ports: 1629, 12225, 23048, 23592, 27926, 42747, 43799, 45905, 46826, 47427, 48043, 48989. Country: Canada. Reputation: scan source.
Observed 17 times. Targeted ports: 7654. Country: United States.
Observed 24 times. Targeted ports: 22, 23. Country: Chile.
Observed 1 times. Targeted ports: 1433. Country: Jamaica.
Observed 3 times. Targeted ports: 9443. Country: United States. Reputation: scan source.
Observed 6 times. Targeted ports: 42562. Country: Canada. Reputation: scan source.
Observed 10 times. Targeted ports: 8443. Country: Belgium.
Observed 2 times. Targeted ports: 143. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 1080. Country: Singapore.
Observed 20 times. Targeted ports: 1224. Country: United States.
Observed 6 times. Targeted ports: 4068. Country: United States. Reputation: mass scanner.
Observed 6 times. Targeted ports: 4068. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 8443. Country: France. Reputation: scan source.
Observed 5 times. Targeted ports: 8447. Country: Thailand. Reputation: bad reputation.
Observed 5 times. Targeted ports: 7222. Country: United States. Reputation: bad reputation.
Observed 26 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 5 times. Targeted ports: 22222. Country: China.
Observed 2 times. Targeted ports: 3306. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 990. Country: Belgium.
Observed 1 times. Targeted ports: 5093. Country: Malaysia. Reputation: bad reputation.
Observed 1 times. Targeted ports: 137. Country: United Kingdom.
Observed 19 times. Targeted ports: 7000. Country: United States.
Observed 65 times. Targeted ports: 9200. Country: United States. Reputation: scan source.
Observed 5 times. Targeted ports: 47001. Country: United States. Reputation: scan source.
Observed 13 times. Targeted ports: 22, 23. Country: United States.
Observed 5 times. Targeted ports: 2083. Country: United States. Reputation: bad reputation.
Observed 4 times. Targeted ports: 10001. Country: United States. Reputation: scan source.
Observed 12 times. Targeted ports: 445, 65533. Country: Tunisia.
Observed 144 times. Targeted ports: 23. Country: China.
Observed 19 times. Targeted ports: 445, 1433. Country: Indonesia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 17 times. Targeted ports: 23. Country: Pakistan. Reputation: bad reputation.
Observed 7 times. Targeted ports: 6399. Country: United States. Reputation: scan source.
Observed 1 times. Targeted ports: 123. Country: United States. Reputation: scan source.
Observed 1 times. Targeted ports: 2123. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 123. Country: Belgium.
Observed 1 times. Targeted ports: 161. Country: United States. Reputation: bad reputation.
Observed 26 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 7 times. Targeted ports: 23. Country: Ukraine.
Observed 20 times. Targeted ports: 8190. Country: United States. Reputation: bad reputation.
Observed 47 times. Targeted ports: 443. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.
Observed 4 times. Targeted ports: 46093. Country: United States. Reputation: bad reputation.
Observed 6 times. Targeted ports: 1029. Country: United States. Reputation: mass scanner.
Observed 6 times. Targeted ports: 4361. Country: United States. Reputation: scan source.
Observed 2 times. Targeted ports: 902. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 623. Country: United States. Reputation: mass scanner.
Observed 5 times. Targeted ports: 34419. Country: United Kingdom. Reputation: bad reputation.
Observed 5 times. Targeted ports: 22. Country: Belgium.
Observed 4 times. Targeted ports: 9004. Country: United States. Reputation: bad reputation.
Observed 8 times. Targeted ports: 15000. Country: United States. Reputation: scan source.
Observed 3 times. Targeted ports: 8030. Country: United States. Reputation: mass scanner.
Observed 1 times. Targeted ports: 123. Country: Belgium.
Observed 5 times. Targeted ports: 8443. Country: United States. Reputation: bad reputation.
Observed 3 times. Targeted ports: 8020. Country: United States. Reputation: mass scanner.
Observed 4 times. Targeted ports: 48946. Country: United Kingdom. Reputation: bad reputation.
Observed 1 times. Targeted ports: 5349. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 9878. Country: United Kingdom. Reputation: bad reputation.
Observed 4 times. Targeted ports: 52313. Country: United Kingdom. Reputation: bad reputation.
Observed 4 times. Targeted ports: 7547. Country: Nigeria. Reputation: bad reputation.
Observed 2 times. Targeted ports: 5060. Country: United States. Reputation: scan source.
Observed 5 times. Targeted ports: 5038. Country: Germany. Reputation: bad reputation.
Observed 6 times. Targeted ports: 3830. Country: France. Reputation: mass scanner.
Observed 6 times. Targeted ports: 3830. Country: France. Reputation: mass scanner.
Observed 9 times. Targeted ports: 22. Country: Iran. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.
Observed 4 times. Targeted ports: 50999. Country: United Kingdom. Reputation: bad reputation.
Observed 6 times. Targeted ports: 1583. Country: United States. Reputation: scan source.
Observed 2 times. Targeted ports: 8080. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 32564. Country: United Kingdom. Reputation: bad reputation.
Observed 4 times. Targeted ports: 63256. Country: Belgium.
Observed 2 times. Targeted ports: 85. Country: The Netherlands.
Observed 5 times. Targeted ports: 46989. Country: United Kingdom. Reputation: bad reputation.
Observed 17 times. Targeted ports: 8871. Country: Singapore. Reputation: bad reputation.
Observed 4 times. Targeted ports: 80. Country: Belgium.
Observed 6 times. Targeted ports: 7738. Country: United States. Reputation: mass scanner.
Observed 6 times. Targeted ports: 2096. Country: United States. Reputation: scan source.
Observed 4 times. Targeted ports: 3000. Country: United States.
Observed 6 times. Targeted ports: 1433. Country: India.
Observed 20 times. Targeted ports: 445. Country: Indonesia.
Observed 2 times. Targeted ports: 21. Country: United States. Reputation: bad reputation.
Observed 2 times. Targeted ports: 8080. Country: Pakistan.
Observed 7 times. Targeted ports: 443. Country: Germany. Reputation: scan source.
Observed 1 times. Country: China.
Observed 1 times. Country: China.
Observed 26 times. Targeted ports: 445. Country: Russia. Alert categories: Not Suspicious Traffic. Signatures: ET INFO Potentially unsafe SMBv1 protocol in use.
Observed 1 times. Country: China.
Observed 4 times. Targeted ports: 1801. Country: United States. Reputation: scan source.