Threat Intelligence Feed — Tag: ANOMALY

Malicious activity detected from 66.132.172.16 (US, ASNone). 875 events observed across BACnet, EtherNet/IP, TCP, TCP/SYN. AI verdict: NOISE.

Threat actor 160.119.76.24 conducted comprehensive reconnaissance against industrial control systems and enterprise services on April 24, 2026, targeting multiple ICS/SCADA protocols including Modbus, S7comm, DNP3, and EtherNet/IP alongside traditional IT services. Despite the broad protocol coverag…