SPT:5060, DPT:5060, PROTO:UDP, SIP / VoIP scanning or fraud attempts. OBSERVED=single-port; PORTS=50 ...
show moreSPT:5060, DPT:5060, PROTO:UDP, SIP / VoIP scanning or fraud attempts. OBSERVED=single-port; PORTS=5060; N_EVENTS=2; T_WINDOW=1
show less
SPT:49629, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N ...
show moreSPT:49629, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N_EVENTS=3; T_WINDOW=1
show less
SPT:49633, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N ...
show moreSPT:49633, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N_EVENTS=3; T_WINDOW=5
show less
SPT:49620, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N ...
show moreSPT:49620, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N_EVENTS=3; T_WINDOW=1
show less
SPT:48412, DPT:53, PROTO:UDP, DNS reconnaissance or amplification probing. OBSERVED=single-port; POR ...
show moreSPT:48412, DPT:53, PROTO:UDP, DNS reconnaissance or amplification probing. OBSERVED=single-port; PORTS=53; N_EVENTS=3; T_WINDOW=240
show less
SPT:46732, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N ...
show moreSPT:46732, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N_EVENTS=3; T_WINDOW=1
show less
SPT:59618, DPT:5901, PROTO:TCP, Firewall drop activity. OBSERVED=horizontal-scan; PORTS=5901|5902; N ...
show moreSPT:59618, DPT:5901, PROTO:TCP, Firewall drop activity. OBSERVED=horizontal-scan; PORTS=5901|5902; N_EVENTS=3; T_WINDOW=300
show less
SPT:61234, DPT:5935, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; ...
show moreSPT:61234, DPT:5935, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; PORTS=5911|5918|5935|5971|5979|5990; N_EVENTS=10; T_WINDOW=240
show less
SPT:5060, DPT:5060, PROTO:UDP, SIP / VoIP scanning or fraud attempts. OBSERVED=single-port; PORTS=50 ...
show moreSPT:5060, DPT:5060, PROTO:UDP, SIP / VoIP scanning or fraud attempts. OBSERVED=single-port; PORTS=5060; N_EVENTS=2; T_WINDOW=1
show less
SPT:47470, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizon ...
show moreSPT:47470, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizontal-scan; PORTS=443|80; N_EVENTS=4; T_WINDOW=600
show less
SPT:37705, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N ...
show moreSPT:37705, DPT:22, PROTO:TCP, SSH brute-force or probing attempts. OBSERVED=single-port; PORTS=22; N_EVENTS=3; T_WINDOW=1
show less
SPT:59683, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-p ...
show moreSPT:59683, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-port; PORTS=80; N_EVENTS=4; T_WINDOW=1
show less
SPT:443, DPT:57462, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; ...
show moreSPT:443, DPT:57462, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; PORTS=49629|53694|55231|57462|57727|61606; N_EVENTS=10; T_WINDOW=300
show less