IOC Details

Comment history

• 2026-05-01

  Observed 11 times. Targeted ports: 8585. Country: United States.

• 2026-04-30

  Observed 33 times. Targeted ports: 1723. Country: United States.

• 2026-04-29

  Observed 56 times. Targeted ports: 9443, 24001. Country: United States.

• 2026-04-28

  Observed 20 times. Targeted ports: 443. Country: United States.

• 2026-04-27

  Observed 43 times. Targeted ports: 21, 9800. Country: United States.

• 2026-04-23

  Observed 45 times. Targeted ports: 10080. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-04-22

  Observed 1 times. Targeted ports: 5002. Country: United States.

• 2026-04-21

  Observed 35 times. Targeted ports: 80. Country: United States.

• 2026-03-27

  Observed 100 times. Targeted ports: 5431, 27017. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-26

  Observed 147 times. Targeted ports: 1080, 7777, 30005, 55555. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-25

  Observed 45 times. Targeted ports: 9800. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-24

  Observed 54 times. Targeted ports: 5002. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-23

  Observed 65 times. Targeted ports: 1433. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM ESTABLISHED SYN resend with different seq.

• 2026-03-22

  Observed 113 times. Targeted ports: 3001, 9200, 10001. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-21

  Observed 38 times. Targeted ports: 7777. Country: United States.

• 2026-03-20

  Observed 128 times. Targeted ports: 7777, 8008, 8087. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-19

  Observed 86 times. Targeted ports: 1080, 9800. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-18

  Observed 36 times. Targeted ports: 4840, 8117. Country: United States. Reputation: known attacker.

• 2026-03-17

  Observed 214 times. Targeted ports: 3001, 8079, 22226, 37777. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-16

  Observed 55 times. Targeted ports: 8087. Country: United States. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port, SURICATA STREAM spurious retransmission.

• 2026-03-15

  Observed 23 times. Targeted ports: 389, 9002. Country: United States. Reputation: known attacker.

• 2026-03-14

  Observed 184 times. Targeted ports: 3001, 27017, 31337, 37215. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-13

  Observed 56 times. Targeted ports: 9002. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-12

  Observed 85 times. Targeted ports: 51005, 52869. Country: United States.

• 2026-03-08

  Observed 35 times. Targeted ports: 8200. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-07

  Observed 37 times. Targeted ports: 1962. Country: United States.

• 2026-03-06

  Observed 53 times. Targeted ports: 1443. Country: United States. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

• 2026-03-04

  Observed 47 times. Targeted ports: 3001, 5431. Country: United States.

• 2026-03-03

  Observed 427 times. Targeted ports: 2079, 2086, 4444, 4500, 8180, 8999, 9043, 24001, 30003, 37777. Country: United States. Alert categories: Generic Protocol Command Decode, Misc activity.

Actions