SPT:61234, DPT:5920, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; ...
show moreSPT:61234, DPT:5920, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; PORTS=5901|5910|5917|5920|5927|5946|5948|5954|5956|5984; N_EVENTS=10; T_WINDOW=240
show less
SPT:39158, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizon ...
show moreSPT:39158, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizontal-scan; PORTS=443|80; N_EVENTS=4; T_WINDOW=5
show less
SPT:61234, DPT:6015, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; ...
show moreSPT:61234, DPT:6015, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; PORTS=5954|5961|5986|5997|6005|6015|6040|6051|6067|6077; N_EVENTS=10; T_WINDOW=300
show less
SPT:61234, DPT:6061, PROTO:TCP, Low-and-slow port probing activity. OBSERVED=horizontal-scan; PORTS= ...
show moreSPT:61234, DPT:6061, PROTO:TCP, Low-and-slow port probing activity. OBSERVED=horizontal-scan; PORTS=5906|5912|5917|5923|5933|5938|5941|5974|5988|6007|6009|6019|6027|6039|6050|6061|6063|6075|6079|6089; N_EVENTS=20; T_WINDOW=1200
show less
SPT:34314, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizon ...
show moreSPT:34314, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizontal-scan; PORTS=443|80; N_EVENTS=4; T_WINDOW=5
show less
SPT:37008, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-p ...
show moreSPT:37008, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-port; PORTS=80; N_EVENTS=4; T_WINDOW=10
show less
SPT:61234, DPT:5973, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; ...
show moreSPT:61234, DPT:5973, PROTO:TCP, Sustained aggressive probing and scanning. OBSERVED=horizontal-scan; PORTS=5912|5914|5929|5931|5953|5965|5973|5981|5988|5995; N_EVENTS=10; T_WINDOW=180
show less
SPT:55914, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizon ...
show moreSPT:55914, DPT:443, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=horizontal-scan; PORTS=443|80; N_EVENTS=4; T_WINDOW=5
show less
SPT:53, DPT:3868, PROTO:TCP, Low-and-slow port probing activity. OBSERVED=horizontal-scan; PORTS=113 ...
show moreSPT:53, DPT:3868, PROTO:TCP, Low-and-slow port probing activity. OBSERVED=horizontal-scan; PORTS=1137|1149|1192|1874|191|1968|2077|2181|2292|242|3051|3058|3340|3346|3444|354|3804|3868|545|804; N_EVENTS=20; T_WINDOW=3900
show less
SPT:53914, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-p ...
show moreSPT:53914, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-port; PORTS=80; N_EVENTS=4; T_WINDOW=5
show less
SPT:45632, DPT:2375, PROTO:TCP, Docker Remote API (TCP/2375) probing or unauthorized access attempts ...
show moreSPT:45632, DPT:2375, PROTO:TCP, Docker Remote API (TCP/2375) probing or unauthorized access attempts. OBSERVED=single-port; PORTS=2375; N_EVENTS=3; T_WINDOW=5
show less
SPT:38750, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-p ...
show moreSPT:38750, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-port; PORTS=80; N_EVENTS=4; T_WINDOW=5
show less
SPT:4510, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-po ...
show moreSPT:4510, DPT:80, PROTO:TCP, HTTP/HTTPS reconnaissance and exploitation attempts. OBSERVED=single-port; PORTS=80; N_EVENTS=4; T_WINDOW=5
show less