IOC Details

Comment history

• 2026-04-28

  Observed 22 times. Targeted ports: 631. Country: United States.

• 2026-04-23

  Observed 10 times. Targeted ports: 10001. Country: United States.

• 2026-04-21

  Observed 8 times. Targeted ports: 21778. Country: United States.

• 2026-04-10

  Observed 8 times. Targeted ports: 21814. Country: United States. Reputation: known attacker.

• 2026-03-27

  Observed 8 times. Targeted ports: 5974. Country: United States. Reputation: known attacker.

• 2026-03-26

  Observed 63 times. Targeted ports: 3389. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

• 2026-03-25

  Observed 7 times. Targeted ports: 58603. Country: United States. Reputation: known attacker.

• 2026-03-24

  Observed 16 times. Targeted ports: 5555, 49371. Country: United States. Reputation: known attacker.

• 2026-03-23

  Observed 23 times. Targeted ports: 23. Country: United States. Reputation: known attacker.

• 2026-03-21

  Observed 16 times. Targeted ports: 5985. Country: United States.

• 2026-03-20

  Observed 124 times. Targeted ports: 3389. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

Actions