IOC Details

Comment history

• 2026-06-29

  Observed 16 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

• 2026-06-28

  Observed 43 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-06-27

  Observed 52 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-06-26

  Observed 33 times. Targeted ports: 443, 5555. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

• 2026-06-25

  Observed 17 times. Targeted ports: 5555. Country: The Netherlands. Reputation: known attacker.

• 2026-06-24

  Observed 21 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-06-23

  Observed 65 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-06-22

  Observed 48 times. Targeted ports: 5555, 17000. Country: Ukraine. Reputation: known attacker.

• 2026-06-21

  Observed 35 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-06-20

  Observed 16 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Wrong direction first Data.

• 2026-06-19

  Observed 45 times. Targeted ports: 5555, 17000. Country: The Netherlands.

• 2026-06-18

  Observed 54 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-06-17

  Observed 54 times. Targeted ports: 5555, 17000. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with invalid timestamp, SURICATA STREAM spurious retransmission.

• 2026-06-16

  Observed 35 times. Targeted ports: 443, 5555. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-06-15

  Observed 16 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-06-14

  Observed 34 times. Targeted ports: 17000. Country: The Netherlands.

• 2026-06-13

  Observed 14 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-12

  Observed 13 times. Targeted ports: 443. Country: Ukraine.

• 2026-06-11

  Observed 15 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-10

  Observed 14 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-09

  Observed 15 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-06-08

  Observed 2 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-06-07

  Observed 15 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-06-06

  Observed 14 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-06-05

  Observed 13 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-04

  Observed 13 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-03

  Observed 14 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-02

  Observed 14 times. Targeted ports: 443. Country: The Netherlands.

• 2026-06-01

  Observed 36 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-31

  Observed 35 times. Targeted ports: 17000. Country: The Netherlands.

• 2026-05-30

  Observed 68 times. Targeted ports: 17000. Country: The Netherlands.

• 2026-05-29

  Observed 70 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-28

  Observed 51 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-27

  Observed 48 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-26

  Observed 50 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-25

  Observed 52 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-24

  Observed 52 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-05-23

  Observed 16 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-22

  Observed 33 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-21

  Observed 14 times. Targeted ports: 443. Country: Ukraine. Reputation: known attacker.

• 2026-05-20

  Observed 31 times. Targeted ports: 17000. Country: The Netherlands.

• 2026-05-19

  Observed 14 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-18

  Observed 14 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-17

  Observed 3 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-16

  Observed 15 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-15

  Observed 42 times. Targeted ports: 443, 17000. Country: Ukraine.

• 2026-05-14

  Observed 52 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-13

  Observed 40 times. Targeted ports: 443, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-12

  Observed 34 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-11

  Observed 16 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-05-10

  Observed 14 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-05-09

  Observed 38 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-05-08

  Observed 66 times. Targeted ports: 443, 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-07

  Observed 36 times. Targeted ports: 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-06

  Observed 29 times. Targeted ports: 443, 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-05

  Observed 36 times. Targeted ports: 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-04

  Observed 48 times. Targeted ports: 443, 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-03

  Observed 38 times. Targeted ports: 17000. Country: Netherlands. Reputation: known attacker.

• 2026-05-02

  Observed 2 times. Targeted ports: 17000. Country: Netherlands.

• 2026-05-01

  Observed 21 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-30

  Observed 66 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-29

  Observed 74 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-28

  Observed 75 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-27

  Observed 35 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-26

  Observed 101 times. Targeted ports: 17000. Country: Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.

• 2026-04-23

  Observed 13 times. Targeted ports: 443. Country: Netherlands.

• 2026-04-22

  Observed 26 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-21

  Observed 33 times. Targeted ports: 17000. Country: Netherlands.

• 2026-04-10

  Observed 43 times. Targeted ports: 443, 17000. Country: The Netherlands.

• 2026-03-28

  Observed 3 times. Targeted ports: 8443. Country: Ukraine.

• 2026-03-27

  Observed 15 times. Targeted ports: 4433, 8443. Country: The Netherlands. Reputation: known attacker.

• 2026-03-26

  Observed 14 times. Targeted ports: 443. Country: The Netherlands. Reputation: known attacker.

• 2026-03-25

  Observed 19 times. Targeted ports: 443, 8443. Country: The Netherlands. Reputation: known attacker.

• 2026-03-24

  Observed 17 times. Targeted ports: 7000. Country: The Netherlands.

• 2026-03-23

  Observed 51 times. Targeted ports: 7000, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-03-22

  Observed 29 times. Targeted ports: 23. Country: The Netherlands. Reputation: known attacker. Usernames: root.

• 2026-03-21

  Observed 6 times. Targeted ports: 17001. Country: Ukraine.

• 2026-03-20

  Observed 15 times. Targeted ports: 7000. Country: The Netherlands. Reputation: known attacker.

• 2026-03-19

  Observed 5 times. Targeted ports: 7000, 17001. Country: Ukraine.

• 2026-03-18

  Observed 8 times. Targeted ports: 7000, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-03-17

  Observed 16 times. Targeted ports: 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-03-16

  Observed 42 times. Targeted ports: 7000, 17001. Country: Ukraine.

• 2026-03-15

  Observed 52 times. Targeted ports: 7000, 17001. Country: Ukraine. Reputation: known attacker.

• 2026-03-14

  Observed 45 times. Targeted ports: 7000, 17000, 17001. Country: Ukraine. Reputation: known attacker.

• 2026-03-13

  Observed 17 times. Targeted ports: 7000. Country: The Netherlands.

• 2026-03-12

  Observed 31 times. Targeted ports: 7000, 17000. Country: The Netherlands. Reputation: known attacker.

• 2026-03-11

  Observed 42 times. Targeted ports: 7000, 17001. Country: The Netherlands. Reputation: known attacker.

• 2026-03-10

  Observed 27 times. Targeted ports: 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-09

  Observed 34 times. Targeted ports: 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-08

  Observed 36 times. Targeted ports: 17001. Country: Ukraine.

• 2026-03-07

  Observed 71 times. Targeted ports: 17000, 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-06

  Observed 92 times. Targeted ports: 17000, 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-05

  Observed 3 times. Targeted ports: 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-04

  Observed 7 times. Targeted ports: 7000, 17000, 17001. Country: Netherlands. Reputation: known attacker.

• 2026-03-03

  Observed 86 times. Targeted ports: 7000, 17000, 17001. Country: Netherlands.

• 2026-03-02

  Observed 17 times. Targeted ports: 7000. Country: Netherlands.

Actions