IOC Details

Comment history

• 2026-05-20

  Observed 6 times. Targeted ports: 4899. Country: United States. Reputation: known attacker.

• 2026-05-19

  Observed 8 times. Targeted ports: 49667. Country: United States. Reputation: known attacker.

• 2026-05-18

  Observed 6 times. Targeted ports: 7000. Country: United States. Reputation: known attacker.

• 2026-05-17

  Observed 13 times. Targeted ports: 5001, 18245. Country: United States. Reputation: known attacker.

• 2026-05-16

  Observed 6 times. Targeted ports: 12654. Country: United States. Reputation: known attacker.

• 2026-05-15

  Observed 6 times. Targeted ports: 2096. Country: United States. Reputation: known attacker.

• 2026-05-14

  Observed 7 times. Targeted ports: 6025. Country: United States. Reputation: known attacker.

• 2026-05-13

  Observed 8 times. Targeted ports: 50070. Country: United States. Reputation: known attacker.

• 2026-05-12

  Observed 12 times. Targeted ports: 2002. Country: United States. Reputation: known attacker.

• 2026-05-11

  Observed 14 times. Targeted ports: 5938. Country: United States. Reputation: known attacker.

• 2026-05-10

  Observed 7 times. Targeted ports: 1883. Country: United States. Reputation: known attacker.

• 2026-05-09

  Observed 6 times. Targeted ports: 4899. Country: United States. Reputation: known attacker.

• 2026-05-08

  Observed 21 times. Targeted ports: 25. Country: United States. Reputation: known attacker.

• 2026-05-07

  Observed 11 times. Targeted ports: 6161. Country: United States. Reputation: known attacker.

• 2026-05-06

  Observed 8 times. Targeted ports: 8001. Country: United States. Reputation: known attacker.

• 2026-05-05

  Observed 11 times. Targeted ports: 23. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.

• 2026-05-04

  Observed 14 times. Targeted ports: 1234, 9593. Country: United States. Reputation: known attacker.

• 2026-05-03

  Observed 6 times. Targeted ports: 5802. Country: United States. Reputation: known attacker.

• 2026-05-02

  Observed 7 times. Targeted ports: 2404. Country: United States. Reputation: known attacker.

• 2026-05-01

  Observed 9 times. Targeted ports: 9998. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-04-30

  Observed 6 times. Targeted ports: 60000. Country: United States. Reputation: known attacker.

• 2026-04-29

  Observed 6 times. Targeted ports: 23856. Country: United States. Reputation: known attacker.

• 2026-04-28

  Observed 5 times. Targeted ports: 8443. Country: United States. Reputation: known attacker.

• 2026-04-27

  Observed 7 times. Targeted ports: 49670. Country: United States. Reputation: known attacker.

• 2026-04-26

  Observed 8 times. Targeted ports: 53282. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-04-23

  Observed 13 times. Targeted ports: 3001, 5094. Country: United States. Reputation: known attacker.

• 2026-04-22

  Observed 13 times. Targeted ports: 9443. Country: United States. Reputation: known attacker.

• 2026-04-21

  Observed 13 times. Targeted ports: 5903. Country: United States. Reputation: known attacker.

• 2026-03-27

  Observed 16 times. Targeted ports: 8081. Country: United States. Reputation: known attacker.

• 2026-03-26

  Observed 6 times. Targeted ports: 7900. Country: United States. Reputation: known attacker.

• 2026-03-25

  Observed 9 times. Targeted ports: 1911, 9002. Country: United States. Reputation: known attacker.

• 2026-03-24

  Observed 18 times. Targeted ports: 7047, 9642. Country: United States. Reputation: known attacker.

• 2026-03-23

  Observed 17 times. Targeted ports: 25. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.

• 2026-03-22

  Observed 8 times. Targeted ports: 22522. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-21

  Observed 7 times. Targeted ports: 8123. Country: United States. Reputation: known attacker.

• 2026-03-20

  Observed 6 times. Targeted ports: 5902. Country: United States. Reputation: known attacker.

• 2026-03-19

  Observed 6 times. Targeted ports: 5802. Country: United States. Reputation: known attacker.

• 2026-03-18

  Observed 13 times. Targeted ports: 1337, 5986. Country: United States. Reputation: known attacker.

• 2026-03-17

  Observed 14 times. Targeted ports: 2455, 61617. Country: United States. Reputation: known attacker.

• 2026-03-16

  Observed 7 times. Targeted ports: 9001. Country: United States. Reputation: known attacker.

• 2026-03-15

  Observed 6 times. Targeted ports: 1098. Country: United States. Reputation: known attacker.

• 2026-03-14

  Observed 7 times. Targeted ports: 4001. Country: United States. Reputation: known attacker.

• 2026-03-13

  Observed 14 times. Targeted ports: 3389, 5222. Country: United States. Reputation: known attacker.

• 2026-03-12

  Observed 8 times. Targeted ports: 5800, 20256. Country: United States. Reputation: known attacker.

• 2026-03-11

  Observed 6 times. Targeted ports: 8001. Country: United States. Reputation: known attacker.

• 2026-03-10

  Observed 13 times. Targeted ports: 2000. Country: United States. Reputation: known attacker.

• 2026-03-09

  Observed 19 times. Targeted ports: 6379. Country: United States. Reputation: known attacker.

• 2026-03-08

  Observed 13 times. Targeted ports: 1521. Country: United States. Reputation: known attacker.

• 2026-03-07

  Observed 8 times. Targeted ports: 9642. Country: United States. Reputation: known attacker.

• 2026-03-06

  Observed 6 times. Targeted ports: 6001. Country: United States. Reputation: known attacker.

• 2026-03-04

  Observed 7 times. Targeted ports: 8070. Country: United States. Reputation: known attacker.

• 2026-03-03

  Observed 12 times. Targeted ports: 5901, 7777. Country: United States.

Actions