IOC Details

Comment history

• 2026-06-29

  Observed 10 times. Targeted ports: 51821. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH Client Banner Detected on Unusual Port, ET INFO SSH session in progress on Unusual Port.

• 2026-06-28

  Observed 15 times. Targeted ports: 2403. Country: United States. Reputation: known attacker.

• 2026-06-27

  Observed 8 times. Targeted ports: 45628. Country: United States. Reputation: known attacker.

• 2026-06-26

  Observed 19 times. Targeted ports: 7547. Country: United States. Reputation: known attacker.

• 2026-06-25

  Observed 142 times. Targeted ports: 3389. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

• 2026-06-24

  Observed 15 times. Targeted ports: 4839. Country: United States. Reputation: known attacker.

• 2026-06-23

  Observed 7 times. Targeted ports: 45858. Country: United States. Reputation: known attacker.

• 2026-06-22

  Observed 25 times. Targeted ports: 2077. Country: United States. Reputation: known attacker.

• 2026-06-21

  Observed 23 times. Targeted ports: 32749. Country: United States. Reputation: known attacker.

• 2026-06-20

  Observed 15 times. Targeted ports: 10002. Country: United States. Reputation: known attacker.

• 2026-06-19

  Observed 15 times. Targeted ports: 1961. Country: United States. Reputation: known attacker.

• 2026-06-18

  Observed 111 times. Targeted ports: 443. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data, SURICATA STREAM spurious retransmission.

• 2026-06-17

  Observed 7 times. Targeted ports: 6007. Country: United States. Reputation: known attacker.

• 2026-06-16

  Observed 7 times. Targeted ports: 37962. Country: United States. Reputation: known attacker.

• 2026-06-15

  Observed 8 times. Targeted ports: 8005. Country: United States. Reputation: known attacker.

• 2026-06-14

  Observed 30 times. Targeted ports: 143. Country: United States. Reputation: known attacker.

• 2026-06-13

  Observed 14 times. Targeted ports: 9601. Country: United States. Reputation: known attacker.

• 2026-06-12

  Observed 8 times. Targeted ports: 5531. Country: United States. Reputation: known attacker.

• 2026-06-11

  Observed 12 times. Targeted ports: 13723. Country: United States. Reputation: known attacker.

• 2026-06-09

  Observed 8 times. Targeted ports: 51785. Country: United States. Reputation: known attacker.

• 2026-06-08

  Observed 21 times. Targeted ports: 62853. Country: United States. Reputation: known attacker.

• 2026-06-06

  Observed 8 times. Targeted ports: 22222. Country: United States. Reputation: known attacker.

• 2026-06-05

  Observed 7 times. Targeted ports: 29862. Country: United States. Reputation: known attacker.

• 2026-06-04

  Observed 15 times. Targeted ports: 2181. Country: United States. Reputation: known attacker.

• 2026-06-03

  Observed 8 times. Targeted ports: 4443. Country: United States. Reputation: known attacker.

• 2026-06-02

  Observed 8 times. Targeted ports: 38307. Country: United States. Reputation: known attacker.

• 2026-06-01

  Observed 7 times. Targeted ports: 61435. Country: United States. Reputation: known attacker.

• 2026-05-31

  Observed 14 times. Targeted ports: 64479. Country: United States. Reputation: known attacker.

• 2026-05-30

  Observed 12 times. Targeted ports: 6379. Country: United States. Reputation: known attacker.

• 2026-05-28

  Observed 9 times. Targeted ports: 3000. Country: United States. Reputation: known attacker.

• 2026-05-27

  Observed 27 times. Targeted ports: 4839. Country: United States. Reputation: known attacker.

• 2026-05-26

  Observed 9 times. Targeted ports: 8081. Country: United States. Reputation: known attacker.

• 2026-05-25

  Observed 28 times. Targeted ports: 2281. Country: United States. Reputation: known attacker.

• 2026-05-24

  Observed 22 times. Targeted ports: 22707. Country: United States. Reputation: known attacker.

• 2026-05-23

  Observed 15 times. Targeted ports: 18444. Country: United States. Reputation: known attacker.

• 2026-05-22

  Observed 22 times. Targeted ports: 44819. Country: United States. Reputation: known attacker.

• 2026-05-18

  Observed 7 times. Targeted ports: 3000. Country: United States. Reputation: known attacker.

• 2026-05-17

  Observed 7 times. Targeted ports: 2485. Country: United States. Reputation: known attacker.

• 2026-05-15

  Observed 8 times. Targeted ports: 49522. Country: United States.

• 2026-05-14

  Observed 25 times. Targeted ports: 38253. Country: United States. Reputation: known attacker.

• 2026-05-13

  Observed 1 times. Targeted ports: 27882. Country: United States. Reputation: known attacker.

• 2026-05-08

  Observed 7 times. Targeted ports: 40000. Country: United States. Reputation: known attacker.

• 2026-05-07

  Observed 7 times. Targeted ports: 51901. Country: United States. Reputation: known attacker.

• 2026-05-06

  Observed 7 times. Targeted ports: 40285. Country: United States. Reputation: known attacker.

• 2026-05-02

  Observed 11 times. Targeted ports: 4312. Country: United States.

• 2026-04-30

  Observed 12 times. Targeted ports: 3306. Country: United States.

• 2026-04-29

  Observed 24 times. Targeted ports: 43198. Country: United States.

• 2026-04-27

  Observed 7 times. Targeted ports: 4891. Country: United States.

• 2026-04-23

  Observed 7 times. Targeted ports: 4831. Country: United States.

• 2026-04-22

  Observed 7 times. Targeted ports: 8441. Country: United States.

• 2026-03-28

  Observed 7 times. Targeted ports: 389. Country: United States.

• 2026-03-27

  Observed 11 times. Targeted ports: 22. Country: United States. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port.

• 2026-03-26

  Observed 7 times. Targeted ports: 24884. Country: United States. Reputation: known attacker.

• 2026-03-25

  Observed 23 times. Targeted ports: 42909. Country: United States. Reputation: known attacker.

• 2026-03-24

  Observed 8 times. Targeted ports: 1962. Country: United States. Reputation: known attacker.

• 2026-03-21

  Observed 35 times. Targeted ports: 23. Country: United States.

• 2026-03-20

  Observed 16 times. Targeted ports: 1541. Country: United States.

Actions