Indicators of Compromise

Name: CTIWatch Threat Intelligence Dataset
License: https://creativecommons.org/licenses/by-nc/4.0/

Active only1,675,985 IoCs← click a row for enrichment details

Type	Value / Enrichment	Confidence	Source	Tags	Seen
ip	143.244.142.15T-Pot honeypot: 128 hits; types=[P0f,Suricata,Fatt,H0neytr4p]; ports=[80,443,8080,22,445,8443,777,1985,4430,4444]	90%	T-Pot Honeypot	p0ffatt	05/08/2026
ip	41.193.169.85	85%	Cowrie Honeypot	honeypotssh-attack	05/08/2026
ip	85.208.254.192	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	101.34.55.202	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	115.190.231.151	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	64.225.48.218	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	49.232.132.53	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	185.8.174.163	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	91.209.135.74	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	203.170.58.129	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	117.72.67.127	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	139.9.158.30	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	113.31.105.30	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	109.110.170.138	85%	Cowrie Honeypot	ssh-attackids-alert	05/08/2026
ip	115.190.192.112	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	14.165.128.204	85%	Cowrie Honeypot	honeypotssh-attack	05/08/2026
ip	181.78.8.29	85%	Cowrie Honeypot	honeypotssh-attack	05/08/2026
ip	116.4.96.218	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	45.93.135.129T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	37.55.71.42T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	186.189.99.38T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	154.124.229.9T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	117.22.91.25T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	106.115.103.61T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23]	75%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	193.32.249.166T-Pot honeypot: 7 hits; types=[P0f,Dionaea,Suricata]; ports=[27017]	85%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	190.55.123.218T-Pot honeypot: 8 hits; types=[P0f,Cowrie,Suricata]; ports=[23]	85%	T-Pot Honeypot	p0fcowrie	05/08/2026
ip	181.44.41.23T-Pot honeypot: 8 hits; types=[P0f,Cowrie,Suricata]; ports=[23]	85%	T-Pot Honeypot	p0fcowrie	05/08/2026
ip	49.232.241.245	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	103.217.186.138T-Pot honeypot: 23 hits; types=[P0f,Suricata,Cowrie]; ports=[22]	85%	T-Pot Honeypot	p0fcowrie	05/08/2026
ip	39.109.239.71T-Pot honeypot: 30 hits; types=[P0f,Cowrie,Suricata]; ports=[22,23]	85%	T-Pot Honeypot	p0fcowrie	05/08/2026
ip	172.104.146.126T-Pot honeypot: 207 hits; types=[P0f,Dionaea,Suricata]; ports=[135]	90%	T-Pot Honeypot	p0fhoneypot	05/08/2026
ip	176.65.132.131	75%	suricata-ids	p0fhoneyaml	05/08/2026
ip	183.128.251.1	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	91.196.152.88	85%	Cowrie Honeypot	ssh-attackids-alert	05/08/2026
ip	173.230.142.149	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	94.198.16.27	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	139.162.130.98	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	147.93.187.188	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	58.87.92.229	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	123.56.166.81	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	152.136.140.220	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	66.45.242.46	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
ip	152.136.22.68	85%	Cowrie Honeypot	ssh-attackhoneypot	05/08/2026
domain	tfqmi9dx.hanovereyephotography.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	05/08/2026
domain	relay0.aquadisplay.lolThreatFox botnet_cc (win.revstealer)	75%	ThreatFox	threatfoxbotnet_cc	05/08/2026
domain	jirhjn1r.fungame777.coThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	05/08/2026
url	http://opeaadn.click:2993ThreatFox botnet_cc (win.remus)	75%	ThreatFox	threatfoxbotnet_cc	05/08/2026
domain	shopmamadora.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	05/08/2026
domain	socomufflerandradiator.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	05/08/2026
domain	rntyfl.shopmamadora.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	05/08/2026

← PreviousPage 8 / 33520Next →