Indicators of Compromise

Name: CTIWatch Threat Intelligence Dataset
License: https://creativecommons.org/licenses/by-nc/4.0/

Active only1,695,920 IoCs← click a row for enrichment details

Type	Value / Enrichment	Confidence	Source	Tags	Seen
ip	129.222.247.141 🇨🇦 CA	90%	Cowrie Honeypot	honeypotssh-attack	10/08/2026
ip	23.92.19.47 🇺🇸 US	81%	suricata-ids	ids-alert	10/08/2026
ip	123.160.172.114T-Pot honeypot: 4 hits; types=[P0f,Suricata]; ports=[12408] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	111.113.88.26T-Pot honeypot: 4 hits; types=[P0f,Suricata]; ports=[49667] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	103.74.100.183T-Pot honeypot: 4 hits; types=[P0f,Suricata]; ports=[2123,6123] 🇻🇳 VN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	59.125.31.162T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇹🇼 TW	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	187.190.242.28T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[22] 🇲🇽 MX	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	111.123.83.209T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	106.112.15.240T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	104.248.121.242T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[1883] 🇺🇸 US	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	152.67.96.249T-Pot honeypot: 6 hits; types=[P0f,Suricata]; ports=[22,5522] 🇦🇺 AUAB:100%	98%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	201.184.153.146T-Pot honeypot: 8 hits; types=[P0f,Cowrie,Suricata]; ports=[23] 🇨🇴 CO	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	142.93.140.8T-Pot honeypot: 10 hits; types=[P0f,H0neytr4p,Suricata,Fatt]; ports=[443] 🇳🇱 NL	90%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	37.19.220.22T-Pot honeypot: 14 hits; types=[P0f,Suricata,Fatt]; ports=[443] 🇺🇸 US	84%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	165.232.87.4T-Pot honeypot: 14 hits; types=[P0f,Suricata,Fatt,Tanner]; ports=[80] 🇳🇱 NL	90%	T-Pot Honeypot	tannerp0f	10/08/2026
ip	193.202.80.186T-Pot honeypot: 21 hits; types=[P0f,Suricata,Ciscoasa]; ports=[8443] 🇺🇸 US	90%	T-Pot Honeypot	p0fciscoasa	10/08/2026
ip	193.151.188.148T-Pot honeypot: 21 hits; types=[P0f,Suricata,Ciscoasa]; ports=[8443] 🇺🇸 US	90%	T-Pot Honeypot	p0fciscoasa	10/08/2026
ip	157.22.124.210T-Pot honeypot: 21 hits; types=[P0f,Suricata,Ciscoasa]; ports=[8443] 🇬🇧 GB	90%	T-Pot Honeypot	p0fciscoasa	10/08/2026
ip	157.22.101.253T-Pot honeypot: 21 hits; types=[P0f,Suricata,Ciscoasa]; ports=[8443] 🇩🇰 DK	90%	T-Pot Honeypot	p0fciscoasa	10/08/2026
ip	130.49.113.77T-Pot honeypot: 22 hits; types=[P0f,Suricata,Ciscoasa]; ports=[8443] 🇩🇪 DE	90%	T-Pot Honeypot	p0fciscoasa	10/08/2026
ip	183.6.91.151T-Pot honeypot: 39 hits; types=[P0f,Cowrie,Suricata,Fatt]; ports=[22] 🇨🇳 CN	90%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	94.154.43.237T-Pot honeypot: 40 hits; types=[P0f,Cowrie,Suricata]; ports=[23] 🇳🇱 NL	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	201.188.120.242 🇨🇱 CL	90%	Cowrie Honeypot	honeypotssh-attack	10/08/2026
ip	102.131.60.215 🇿🇦 ZA	90%	Cowrie Honeypot	honeypotssh-attack	10/08/2026
ip	157.230.124.251T-Pot honeypot: 4 hits; types=[P0f,Suricata]; ports=[22] 🇩🇪 DE	90%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	82.86.132.96T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇻🇪 VE	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	27.198.124.150T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	220.135.168.173T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇹🇼 TW	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	178.93.200.7T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[21] 🇨🇦 CA	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	124.131.92.42T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	112.252.121.145T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN	84%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	186.128.129.88T-Pot honeypot: 7 hits; types=[P0f,Cowrie,Suricata]; ports=[23] 🇦🇷 AR	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	177.75.81.13T-Pot honeypot: 7 hits; types=[P0f,Cowrie,Suricata]; ports=[23] 🇧🇷 BR	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	181.170.4.200T-Pot honeypot: 8 hits; types=[P0f,Cowrie,Suricata]; ports=[23] 🇦🇷 AR	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	193.148.57.43T-Pot honeypot: 14 hits; types=[P0f,Suricata]; ports=[5929,6061,5946,5977] 🇫🇮 FIAB:58%	95%	T-Pot Honeypot	p0fhoneypot	10/08/2026
ip	49.124.149.54T-Pot honeypot: 15 hits; types=[Cowrie,P0f,Suricata,Fatt]; ports=[22] 🇲🇾 MY	90%	T-Pot Honeypot	p0ffatt	10/08/2026
ip	102.64.217.53T-Pot honeypot: 32 hits; types=[P0f,Cowrie,Suricata]; ports=[23,22] 🇹🇬 TG	90%	T-Pot Honeypot	p0fcowrie	10/08/2026
ip	105.159.235.82 🇲🇦 MA	81%	suricata-ids	ids-alert	10/08/2026
domain	59qxatd0.gtacauto.comThreatFox payload_delivery (js.clearfake)	93%	ThreatFox	threatfoxpayload_delivery	10/08/2026
url	http://beljaro.shop:2536/imagesThreatFox botnet_cc (win.remus)	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
url	http://shkpiva.shop:5627/commentsThreatFox botnet_cc (win.remus)	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
domain	goldalaign.comThreatFox payload_delivery (js.clearfake)	93%	ThreatFox	threatfoxpayload_delivery	10/08/2026
domain	nksdosz.goldalignn.comThreatFox payload_delivery (js.clearfake)	93%	ThreatFox	threatfoxpayload_delivery	10/08/2026
ip	104.249.10.87ThreatFox botnet_cc (win.pure_rat) 🇫🇷 FR	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	118.99.88.240ThreatFox botnet_cc (win.asyncrat) 🇮🇩 ID	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	151.241.99.168ThreatFox botnet_cc (win.asyncrat) 🇺🇸 US	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	181.215.49.119ThreatFox botnet_cc (win.pure_rat) 🇺🇸 US	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	186.168.97.172ThreatFox botnet_cc (win.deimos_c2) 🇨🇴 CO	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	31.76.125.2ThreatFox botnet_cc (win.pure_rat) 🇵🇱 PL	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026
ip	37.244.251.138ThreatFox botnet_cc (win.danabot) 🇭🇷 HR	82%	ThreatFox	threatfoxbotnet_cc	10/08/2026

← PreviousPage 102 / 33919Next →