On 2026-10-24 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. Ports targeted: 636, 3306, 5432, 3389, 1433. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 81; ET SCAN Suspicious inbound to mySQL port 3306; ET SCAN Suspicious inbound to PostgreSQL port 5432. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-24 (UTC) this address generated 5 IDS alerts (3 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 5 IDS alerts (3 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 114. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-24 (UTC) this address generated 11 IDS alerts (5 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 11 IDS alerts (5 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET DROP Dshield Block Listed Source group 1; ET CINS Active Threat Intelligence Poor Reputation IP group 146. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-24 (UTC) this address generated 11 IDS alerts (4 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 11 IDS alerts (4 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET COMPROMISED Known Compromised or Hostile Host Traffic group 15; ET DROP Spamhaus DROP Listed Traffic Inbound group 11. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-24 (UTC) this address generated 13 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 13 IDS alerts (1 high severity) against a monitored host. Ports targeted: 12571, 52038, 222, 7620, 4444, 49724. Signatures: ET COMPROMISED Known Compromised or Hostile Host Traffic group 1; NETWATCH inbound common RAT port 4444. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-24 (UTC) this address generated 28 IDS alerts (3 high severity) against a monitored host. ...
show moreOn 2026-10-24 (UTC) this address generated 28 IDS alerts (3 high severity) against a monitored host. Ports targeted: 4145, 5555, 33183, 8822, 5515, 5432. Signatures: ET COMPROMISED Known Compromised or Hostile Host Traffic group 1; NETWATCH inbound ADB shell port 5555; ET SCAN Suspicious inbound to PostgreSQL port 5432. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-24.
show less
On 2026-10-23 (UTC) this address generated 4 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 4 IDS alerts (1 high severity) against a monitored host. Ports targeted: 3389, 3391, 3780. Signatures: ET DROP Spamhaus DROP Listed Traffic Inbound group 8; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. Ports targeted: 3389, 8001, 2001, 51785. Signatures: ET DROP Dshield Block Listed Source group 1; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 5 IDS alerts (1 high severity) against a monitored host. Ports targeted: 3389, 9663, 8048, 9006. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 145; NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 146. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 7 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 7 IDS alerts (1 high severity) against a monitored host. Ports targeted: 52869, 8080, 80, 7547, 9034, 60001. Signatures: SURICATA TCPv4 invalid checksum; ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394). The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 3 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 3 IDS alerts (2 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 115. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 8 IDS alerts (5 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 8 IDS alerts (5 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 145. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. Ports targeted: 3389. Signatures: ET DROP Spamhaus DROP Listed Traffic Inbound group 11; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-23 (UTC) this address generated 8 IDS alerts (3 high severity) against a monitored host. ...
show moreOn 2026-10-23 (UTC) this address generated 8 IDS alerts (3 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET COMPROMISED Known Compromised or Hostile Host Traffic group 15; ET DROP Spamhaus DROP Listed Traffic Inbound group 11. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-23.
show less
On 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. Ports targeted: 5900, 5902. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 48; NETWATCH inbound VNC port 5900. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. Ports targeted: 5900, 1812. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 128; NETWATCH inbound VNC port 5900. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. Ports targeted: 3389, 8531. Signatures: ET DROP Dshield Block Listed Source group 1; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 3 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 3 IDS alerts (2 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 113. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 8 IDS alerts (5 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 8 IDS alerts (5 high severity) against a monitored host. Ports targeted: 3389. Signatures: NETWATCH inbound RDP port 3389; ET CINS Active Threat Intelligence Poor Reputation IP group 140; ET CINS Active Threat Intelligence Poor Reputation IP group 145. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. Ports targeted: 3389. Signatures: ET DROP Spamhaus DROP Listed Traffic Inbound group 15; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 6 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 6 IDS alerts (1 high severity) against a monitored host. Ports targeted: 22, 3389, 443, 1080. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 266; ET INFO SSH-2.0-Go version string Observed in Network Traffic; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. ...
show moreOn 2026-10-22 (UTC) this address generated 3 IDS alerts (1 high severity) against a monitored host. Ports targeted: 2161, 8090, 5555. Signatures: ET DROP Dshield Block Listed Source group 1; NETWATCH inbound ADB shell port 5555. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-22.
show less
On 2026-10-21 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-21 (UTC) this address generated 4 IDS alerts (2 high severity) against a monitored host. Ports targeted: 4444. Signatures: NETWATCH inbound common RAT port 4444; ET CINS Active Threat Intelligence Poor Reputation IP group 271. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-21.
show less
On 2026-10-21 (UTC) this address generated 10 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-21 (UTC) this address generated 10 IDS alerts (2 high severity) against a monitored host. Ports targeted: 3389, 8554, 1963, 6379, 83, 993. Signatures: ET CINS Active Threat Intelligence Poor Reputation IP group 27; NETWATCH inbound RDP port 3389; NETWATCH inbound common RAT port 4444. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-21.
show less
On 2026-10-21 (UTC) this address generated 5 IDS alerts (2 high severity) against a monitored host. ...
show moreOn 2026-10-21 (UTC) this address generated 5 IDS alerts (2 high severity) against a monitored host. Ports targeted: 5432, 1433, 3389, 5900, 3306. Signatures: ET SCAN Suspicious inbound to PostgreSQL port 5432; ET SCAN Suspicious inbound to MSSQL port 1433; NETWATCH inbound RDP port 3389. The traffic was logged and the source blocked locally. Evidence: NetGuard report 2026-10-21.
show less
Port Scan
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.