IOC Details

IP

Indicator

198.235.24.79

Tag

honeypot

Source

4

First seen

2026-02-24 23:32:26

Last seen

2026-06-26 08:40:42

Hits

107

Comment history

  • 2026-06-26

    Observed 1 times. Targeted ports: 17. Country: United States. Reputation: known attacker.

  • 2026-06-25

    Observed 22 times. Targeted ports: 31337. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.

  • 2026-06-23

    Observed 8 times. Targeted ports: 8090. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.

  • 2026-06-22

    Observed 9 times. Targeted ports: 3052. Country: Canada. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.

  • 2026-06-21

    Observed 1 times. Targeted ports: 17185. Country: United States. Reputation: known attacker.

  • 2026-06-20

    Observed 14 times. Targeted ports: 4022. Country: United States. Reputation: known attacker.

  • 2026-06-19

    Observed 7 times. Targeted ports: 5910. Country: United States. Reputation: known attacker.

  • 2026-06-15

    Observed 15 times. Targeted ports: 4190. Country: United States. Reputation: known attacker.

  • 2026-06-14

    Observed 15 times. Targeted ports: 10259. Country: United States. Reputation: known attacker.

  • 2026-06-13

    Observed 19 times. Targeted ports: 1234. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.

  • 2026-06-12

    Observed 3 times. Targeted ports: 264. Country: Canada. Reputation: known attacker.

  • 2026-06-11

    Observed 3 times. Targeted ports: 636. Country: United States. Reputation: known attacker.

  • 2026-06-09

    Observed 36 times. Targeted ports: 5557, 27015. Country: United States. Reputation: known attacker.

  • 2026-06-08

    Observed 22 times. Targeted ports: 2080. Country: United States. Reputation: known attacker.

  • 2026-06-06

    Observed 17 times. Targeted ports: 8005. Country: United States. Reputation: known attacker.

  • 2026-06-03

    Observed 30 times. Targeted ports: 445. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA SMB malformed request dialects.

  • 2026-06-02

    Observed 1 times. Targeted ports: 13246. Country: United States. Reputation: known attacker.

  • 2026-06-01

    Observed 6 times. Targeted ports: 5289. Country: United States. Reputation: known attacker.

  • 2026-05-29

    Observed 13 times. Targeted ports: 10000. Country: United States. Reputation: known attacker.

  • 2026-05-28

    Observed 23 times. Targeted ports: 2078. Country: United States. Reputation: known attacker.

  • 2026-05-27

    Observed 15 times. Targeted ports: 20257. Country: United States. Reputation: known attacker.

  • 2026-05-26

    Observed 22 times. Targeted ports: 8083. Country: United States. Reputation: known attacker.

  • 2026-05-25

    Observed 20 times. Targeted ports: 5986. Country: United States. Reputation: known attacker.

  • 2026-05-23

    Observed 3 times. Targeted ports: 888. Country: United States. Reputation: known attacker.

  • 2026-05-21

    Observed 14 times. Targeted ports: 6881. Country: Canada. Reputation: known attacker.

  • 2026-05-19

    Observed 13 times. Targeted ports: 10000. Country: United States. Reputation: known attacker.

  • 2026-05-18

    Observed 7 times. Targeted ports: 8333. Country: United States. Reputation: known attacker.

  • 2026-05-17

    Observed 17 times. Targeted ports: 2086. Country: United States. Reputation: known attacker.

  • 2026-05-15

    Observed 3 times. Targeted ports: 5432. Country: Canada. Reputation: known attacker.

  • 2026-05-13

    Observed 24 times. Targeted ports: 102, 10000. Country: United States. Reputation: known attacker.

  • 2026-05-12

    Observed 14 times. Targeted ports: 10011. Country: United States. Reputation: known attacker.

  • 2026-05-11

    Observed 6 times. Targeted ports: 3333. Country: United States. Reputation: known attacker.

  • 2026-05-10

    Observed 7 times. Targeted ports: 8443. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.

  • 2026-05-09

    Observed 1 times. Targeted ports: 1900. Country: United States. Reputation: known attacker.

  • 2026-05-06

    Observed 15 times. Targeted ports: 2300. Country: United States. Reputation: known attacker.

  • 2026-05-05

    Observed 22 times. Targeted ports: 2083. Country: United States. Reputation: known attacker.

  • 2026-05-03

    Observed 3 times. Targeted ports: 67. Country: United States. Reputation: known attacker.

  • 2026-05-02

    Observed 3 times. Targeted ports: 138. Country: United States. Reputation: known attacker.

  • 2026-04-30

    Observed 19 times. Targeted ports: 22. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.

  • 2026-04-29

    Observed 3 times. Targeted ports: 6568. Country: United States. Reputation: known attacker.

  • 2026-04-28

    Observed 6 times. Targeted ports: 2484. Country: United States. Reputation: known attacker.

  • 2026-04-26

    Observed 3 times. Targeted ports: 139. Country: United States. Reputation: known attacker.

  • 2026-04-22

    Observed 1 times. Targeted ports: 123. Country: United States. Reputation: known attacker.

  • 2026-04-10

    Observed 6 times. Targeted ports: 5910. Country: United States. Reputation: known attacker.

  • 2026-03-28

    Observed 1 times. Targeted ports: 13146. Country: Canada. Reputation: known attacker.

  • 2026-03-23

    Observed 19 times. Targeted ports: 21. Country: United States. Reputation: known attacker.

  • 2026-03-22

    Observed 6 times. Targeted ports: 50070. Country: United States. Reputation: known attacker.

  • 2026-03-21

    Observed 6 times. Targeted ports: 8085. Country: Canada. Reputation: known attacker.

  • 2026-03-19

    Observed 7 times. Targeted ports: 9443. Country: Canada. Reputation: known attacker.

  • 2026-03-15

    Observed 16 times. Targeted ports: 51005. Country: Canada. Reputation: known attacker.

  • 2026-03-14

    Observed 6 times. Targeted ports: 8531. Country: Canada. Reputation: known attacker.

  • 2026-03-13

    Observed 1 times. Targeted ports: 1434. Country: United States. Reputation: known attacker.

  • 2026-03-12

    Observed 3 times. Targeted ports: 68. Country: United States. Reputation: known attacker.

  • 2026-03-09

    Observed 1 times. Targeted ports: 13246. Country: United States. Reputation: known attacker.

  • 2026-03-06

    Observed 21 times. Targeted ports: 44344. Country: United States. Reputation: known attacker.

  • 2026-03-05

    Observed 1 times. Targeted ports: 13246. Country: United States. Reputation: known attacker.

  • 2026-03-04

    Observed 3 times. Targeted ports: 8090. Country: United States. Reputation: known attacker.

  • 2026-03-03

    Observed 7 times. Targeted ports: 8333. Country: United States.

Related IOCs

ID Indicator Type Tag Source Last seen Actions
380456
201.124.175.139
IP honeypot 4 2026-06-26 11:48:24 IOC Record
380386
38.76.201.42
IP honeypot 4 2026-06-26 11:48:24 IOC Record
380382
185.85.242.180
IP honeypot 4 2026-06-26 11:48:24 IOC Record
315603
104.243.35.120
IP honeypot 4 2026-06-26 11:48:24 IOC Record
315200
87.251.64.141
IP honeypot 4 2026-06-26 11:48:24 IOC Record