IOC Details

Comment history

• 2026-06-26

  Observed 12 times. Targeted ports: 3306. Country: United States. Reputation: known attacker.

• 2026-06-25

  Observed 15 times. Targeted ports: 1961. Country: United States. Reputation: known attacker.

• 2026-06-24

  Observed 7 times. Targeted ports: 2455. Country: United States. Reputation: known attacker.

• 2026-06-23

  Observed 8 times. Targeted ports: 8006. Country: United States. Reputation: known attacker.

• 2026-06-22

  Observed 7 times. Targeted ports: 8895. Country: United States. Reputation: known attacker.

• 2026-06-21

  Observed 7 times. Targeted ports: 64724. Country: United States. Reputation: known attacker.

• 2026-06-20

  Observed 7 times. Targeted ports: 14336. Country: United States. Reputation: known attacker.

• 2026-06-18

  Observed 15 times. Targeted ports: 8443. Country: United States. Reputation: known attacker.

• 2026-06-17

  Observed 8 times. Targeted ports: 5683. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-06-16

  Observed 9 times. Targeted ports: 2605. Country: United States. Reputation: known attacker.

• 2026-06-15

  Observed 7 times. Targeted ports: 62114. Country: United States. Reputation: known attacker.

• 2026-06-14

  Observed 1 times. Targeted ports: 12322. Country: United States. Reputation: known attacker.

• 2026-06-13

  Observed 7 times. Targeted ports: 26273. Country: United States. Reputation: known attacker.

• 2026-06-12

  Observed 7 times. Targeted ports: 8081. Country: United States. Reputation: known attacker.

• 2026-06-11

  Observed 49 times. Targeted ports: 3389. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

• 2026-06-10

  Observed 7 times. Targeted ports: 7470. Country: United States. Reputation: known attacker.

• 2026-06-08

  Observed 28 times. Targeted ports: 80. Country: United States. Reputation: known attacker.

• 2026-06-07

  Observed 8 times. Targeted ports: 110. Country: United States. Reputation: known attacker.

• 2026-06-06

  Observed 153 times. Targeted ports: 110, 143, 593, 993, 3000, 3387, 5357, 7070, 8000, 8081, 9100. Country: United States. Reputation: known attacker.

• 2026-06-04

  Observed 7 times. Targeted ports: 9286. Country: United States. Reputation: known attacker.

• 2026-06-03

  Observed 12 times. Targeted ports: 110. Country: United States. Reputation: known attacker.

• 2026-06-02

  Observed 16 times. Targeted ports: 17778. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with invalid timestamp.

• 2026-06-01

  Observed 7 times. Targeted ports: 10252. Country: United States. Reputation: known attacker.

• 2026-05-30

  Observed 64 times. Targeted ports: 1080. Country: United States. Reputation: known attacker.

• 2026-05-29

  Observed 7 times. Targeted ports: 4774. Country: United States. Reputation: known attacker.

• 2026-05-25

  Observed 15 times. Targeted ports: 2086, 8010. Country: United States. Reputation: known attacker.

• 2026-05-24

  Observed 16 times. Targeted ports: 18080. Country: United States. Reputation: known attacker.

• 2026-05-21

  Observed 7 times. Targeted ports: 5831. Country: United States. Reputation: known attacker.

• 2026-05-20

  Observed 23 times. Targeted ports: 64411. Country: United States. Reputation: known attacker.

• 2026-05-19

  Observed 8 times. Targeted ports: 45900. Country: United States. Reputation: known attacker.

• 2026-05-17

  Observed 7 times. Targeted ports: 14708. Country: United States. Reputation: known attacker.

• 2026-05-16

  Observed 22 times. Targeted ports: 39742. Country: United States. Reputation: known attacker.

• 2026-05-15

  Observed 2 times. Targeted ports: 5060. Country: United States.

• 2026-05-13

  Observed 9 times. Targeted ports: 1433. Country: United States. Reputation: known attacker.

• 2026-05-12

  Observed 27 times. Targeted ports: 9600. Country: United States. Reputation: known attacker.

• 2026-05-11

  Observed 24 times. Targeted ports: 18246, 33117. Country: United States. Reputation: known attacker.

• 2026-05-08

  Observed 8 times. Targeted ports: 64694. Country: United States. Reputation: known attacker.

• 2026-05-07

  Observed 7 times. Targeted ports: 56504. Country: United States. Reputation: known attacker.

• 2026-05-06

  Observed 15 times. Targeted ports: 3299. Country: United States. Reputation: known attacker.

• 2026-05-05

  Observed 23 times. Targeted ports: 22822. Country: United States. Reputation: known attacker.

• 2026-05-04

  Observed 7 times. Targeted ports: 37612. Country: United States. Reputation: known attacker.

• 2026-05-03

  Observed 9 times. Targeted ports: 8784. Country: United States. Reputation: known attacker.

• 2026-05-02

  Observed 7 times. Targeted ports: 40959. Country: United States.

• 2026-05-01

  Observed 62 times. Targeted ports: 3389. Country: United States. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

• 2026-04-30

  Observed 12 times. Targeted ports: 110. Country: United States.

• 2026-04-29

  Observed 15 times. Targeted ports: 18246. Country: United States.

• 2026-04-27

  Observed 7 times. Targeted ports: 63053. Country: United States.

• 2026-04-26

  Observed 7 times. Targeted ports: 59074. Country: United States.

• 2026-04-21

  Observed 7 times. Targeted ports: 4558. Country: United States.

• 2026-03-28

  Observed 3 times. Targeted ports: 3306. Country: United States.

• 2026-03-27

  Observed 3 times. Targeted ports: 5060. Country: United States. Reputation: known attacker.

Actions