IOC Details

Comment history

• 2026-06-27

  Observed 8 times. Targeted ports: 30233. Country: United States. Reputation: known attacker.

• 2026-06-26

  Observed 10 times. Targeted ports: 25. Country: United States. Reputation: known attacker.

• 2026-06-25

  Observed 7 times. Targeted ports: 49502. Country: United States. Reputation: known attacker.

• 2026-06-24

  Observed 54 times. Targeted ports: 6667. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-06-23

  Observed 7 times. Targeted ports: 11665. Country: United States. Reputation: known attacker.

• 2026-06-22

  Observed 87 times. Targeted ports: 443. Country: United States. Reputation: known attacker.

• 2026-06-21

  Observed 20 times. Targeted ports: 23281. Country: United States. Reputation: known attacker.

• 2026-06-19

  Observed 16 times. Targeted ports: 2087. Country: United States. Reputation: known attacker.

• 2026-06-17

  Observed 8 times. Targeted ports: 28564. Country: United States. Reputation: known attacker.

• 2026-06-16

  Observed 7 times. Targeted ports: 46416. Country: United States. Reputation: known attacker.

• 2026-06-15

  Observed 7 times. Targeted ports: 32319. Country: United States. Reputation: known attacker.

• 2026-06-14

  Observed 15 times. Targeted ports: 37215. Country: United States. Reputation: known attacker.

• 2026-06-12

  Observed 7 times. Targeted ports: 49968. Country: United States. Reputation: known attacker.

• 2026-06-11

  Observed 22 times. Targeted ports: 11102. Country: United States. Reputation: known attacker.

• 2026-06-09

  Observed 9 times. Targeted ports: 30890. Country: United States. Reputation: known attacker.

• 2026-06-07

  Observed 66 times. Targeted ports: 1080. Country: United States. Reputation: known attacker.

• 2026-06-06

  Observed 12 times. Targeted ports: 6379. Country: United States. Reputation: known attacker.

• 2026-06-05

  Observed 16 times. Targeted ports: 11300. Country: United States. Reputation: known attacker.

• 2026-06-04

  Observed 4 times. Targeted ports: 22. Country: United States. Reputation: known attacker. Alert categories: Misc Attack. Signatures: ET DROP Dshield Block Listed Source group 1.

• 2026-06-03

  Observed 7 times. Targeted ports: 51034. Country: United States. Reputation: known attacker.

• 2026-06-02

  Observed 15 times. Targeted ports: 8443. Country: United States. Reputation: known attacker.

• 2026-06-01

  Observed 7 times. Targeted ports: 2400. Country: United States. Reputation: known attacker.

• 2026-05-28

  Observed 7 times. Targeted ports: 4482. Country: United States. Reputation: known attacker.

• 2026-05-26

  Observed 4 times. Targeted ports: 22. Country: United States. Reputation: known attacker. Alert categories: Misc Attack. Signatures: ET DROP Dshield Block Listed Source group 1.

• 2026-05-24

  Observed 8 times. Targeted ports: 53456. Country: United States. Reputation: known attacker.

• 2026-05-22

  Observed 8 times. Targeted ports: 53910. Country: United States. Reputation: known attacker.

• 2026-05-21

  Observed 15 times. Targeted ports: 1961. Country: United States. Reputation: known attacker.

• 2026-05-20

  Observed 8 times. Targeted ports: 23951. Country: United States. Reputation: known attacker.

• 2026-05-18

  Observed 54 times. Targeted ports: 9200. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA TLS invalid record type.

• 2026-05-17

  Observed 9 times. Targeted ports: 389. Country: United States. Reputation: known attacker.

• 2026-05-15

  Observed 7 times. Targeted ports: 41937. Country: United States.

• 2026-05-14

  Observed 16 times. Targeted ports: 61616. Country: United States. Reputation: known attacker.

• 2026-05-13

  Observed 7 times. Targeted ports: 19984. Country: United States. Reputation: known attacker.

• 2026-05-11

  Observed 8 times. Targeted ports: 6513. Country: United States. Reputation: known attacker.

• 2026-05-10

  Observed 8 times. Targeted ports: 38669. Country: United States. Reputation: known attacker.

• 2026-05-09

  Observed 16 times. Targeted ports: 46008. Country: United States. Reputation: known attacker.

• 2026-05-08

  Observed 7 times. Targeted ports: 15853. Country: United States. Reputation: known attacker.

• 2026-05-06

  Observed 15 times. Targeted ports: 8443. Country: United States. Reputation: known attacker.

• 2026-05-05

  Observed 8 times. Targeted ports: 50805. Country: United States. Reputation: known attacker.

• 2026-05-04

  Observed 16 times. Targeted ports: 14813, 20009. Country: United States. Reputation: known attacker.

• 2026-05-03

  Observed 25 times. Targeted ports: 8888. Country: United States. Reputation: known attacker.

• 2026-05-01

  Observed 8 times. Targeted ports: 62302. Country: United States.

• 2026-04-30

  Observed 14 times. Targeted ports: 7561. Country: United States.

• 2026-04-28

  Observed 24 times. Targeted ports: 8082. Country: United States.

• 2026-04-23

  Observed 8 times. Targeted ports: 39428. Country: United States.

• 2026-03-27

  Observed 3 times. Targeted ports: 1433. Country: United States. Reputation: known attacker.

• 2026-03-25

  Observed 7 times. Targeted ports: 20009. Country: United States. Reputation: known attacker.

• 2026-03-22

  Observed 107 times. Targeted ports: 80. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA STREAM spurious retransmission.

Actions