IOC Details

Comment history

• 2026-05-30

  Observed 77 times. Targeted ports: 1045. Country: Germany.

• 2026-05-26

  Observed 85 times. Targeted ports: 999, 8888. Country: Germany. Reputation: known attacker.

• 2026-05-25

  Observed 179 times. Targeted ports: 443, 777, 60000. Country: Germany. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.

• 2026-05-24

  Observed 86 times. Targeted ports: 22808. Country: Germany. Reputation: known attacker.

• 2026-05-23

  Observed 83 times. Targeted ports: 11111. Country: Germany. Reputation: known attacker.

• 2026-05-22

  Observed 78 times. Targeted ports: 4145. Country: Germany. Reputation: known attacker.

• 2026-05-21

  Observed 88 times. Targeted ports: 443. Country: United Kingdom. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.

• 2026-05-20

  Observed 78 times. Targeted ports: 22808. Country: Germany. Reputation: known attacker.

• 2026-05-19

  Observed 84 times. Targeted ports: 3128. Country: Germany. Reputation: known attacker.

• 2026-05-18

  Observed 86 times. Targeted ports: 999, 9999. Country: Germany. Reputation: known attacker.

• 2026-05-17

  Observed 401 times. Targeted ports: 999, 1111, 4145, 10808, 30000, 60000. Country: Germany. Reputation: known attacker.

• 2026-05-16

  Observed 186 times. Targeted ports: 1080, 8888. Country: Germany. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission. Usernames: 123456, 12345678, admin, root.

• 2026-05-15

  Observed 70 times. Targeted ports: 11111. Country: United Kingdom.

• 2026-05-14

  Observed 102 times. Targeted ports: 60000. Country: Germany. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-05-13

  Observed 88 times. Targeted ports: 999, 4145. Country: Germany. Reputation: known attacker.

• 2026-05-12

  Observed 106 times. Targeted ports: 443. Country: Germany. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.

• 2026-05-11

  Observed 170 times. Targeted ports: 1080, 30000. Country: Germany. Reputation: known attacker. Usernames: 123456, 12345678, admin, putin, root.

• 2026-05-10

  Observed 100 times. Targeted ports: 4145. Country: Germany. Reputation: known attacker.

• 2026-05-09

  Observed 385 times. Targeted ports: 10814, 10851, 10873, 10883, 10895. Country: Germany. Reputation: known attacker.

• 2026-05-08

  Observed 83 times. Targeted ports: 8080, 8888. Country: Germany. Reputation: known attacker.

• 2026-05-07

  Observed 359 times. Targeted ports: 3128, 4145, 8888, 9999. Country: Germany. Reputation: known attacker.

• 2026-05-06

  Observed 31 times. Targeted ports: 50037. Country: Germany. Reputation: known attacker.

• 2026-05-05

  Observed 99 times. Targeted ports: 50044, 50060, 50085. Country: Germany. Reputation: known attacker.

• 2026-05-03

  Observed 45 times. Targeted ports: 8001. Country: Germany. Reputation: known attacker.

• 2026-05-02

  Observed 68 times. Targeted ports: 1080, 3128, 4145, 8080, 8888, 9999, 11111. Country: Germany. Usernames: 12345678, mxbypidrza.

• 2026-05-01

  Observed 130 times. Targeted ports: 1080, 4145, 9999, 11111. Country: Germany.

• 2026-04-30

  Observed 76 times. Targeted ports: 50100, 50101. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction.

• 2026-04-29

  Observed 63 times. Targeted ports: 50111, 50135, 50174. Country: Germany.

• 2026-04-28

  Observed 87 times. Targeted ports: 50121, 50137, 50150, 50200. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-04-27

  Observed 109 times. Targeted ports: 50100, 50101. Country: Germany. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Detect protocol only one direction, SURICATA STREAM spurious retransmission.

• 2026-04-23

  Observed 539 times. Targeted ports: 60002, 60021, 60037, 60052. Country: Germany.

• 2026-04-22

  Observed 397 times. Targeted ports: 9031, 9054, 9061. Country: Germany.

• 2026-04-21

  Observed 414 times. Targeted ports: 9009, 9066, 9083. Country: Germany.

• 2026-03-26

  Observed 53 times. Targeted ports: 4145. Country: Germany. Reputation: known attacker.

• 2026-03-25

  Observed 2 times. Targeted ports: 4145. Country: Germany.

Actions