SCARD

Suspicious activity by IP address 66.228.42.204

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 30 May 2026 12:08:23 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 66.228.42.204

Description Count
ET SCAN Rapid POP3S Connections - Possible Brute Force Attack 16
ET SCAN RDP Connection Attempt from Nmap 4
SURICATA TLS invalid SSLv2 header 2

Detailed activity by IP address 66.228.42.204

Timestamp Description Protocol Destination Port
2026-05-30 12:08:23 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-30 12:08:23 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-28 06:23:46 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-28 06:23:40 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-22 14:35:26 SURICATA TLS invalid SSLv2 header TCP 8443
2026-05-22 14:35:26 SURICATA TLS invalid SSLv2 header TCP 8443
2026-05-21 22:35:36 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-21 22:35:36 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-20 05:55:02 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-20 05:55:02 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-14 11:05:33 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-14 11:05:33 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-05 00:51:53 ET SCAN RDP Connection Attempt from Nmap TCP 3389
2026-05-05 00:51:53 ET SCAN RDP Connection Attempt from Nmap TCP 3389
2026-05-02 20:17:34 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-05-02 20:17:34 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-04-28 06:45:18 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-04-28 06:45:18 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-04-23 22:54:58 ET SCAN RDP Connection Attempt from Nmap TCP 3389
2026-04-23 22:54:58 ET SCAN RDP Connection Attempt from Nmap TCP 3389
2026-04-10 07:45:28 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995
2026-04-10 07:45:28 ET SCAN Rapid POP3S Connections - Possible Brute Force Attack TCP 995

 

Back to top