Threat Intelligence Feed — Tag: MODBUS

High-severity reconnaissance campaign detected from IP 18.218.118.203 targeting industrial control systems using Modbus broadcast enumeration techniques alongside multi-protocol scanning activities from February 12 to March 10, 2026. The attacker demonstrated advanced capabilities across OT/IT envir…

A sophisticated threat actor operating from Netherlands-based infrastructure (45.142.193.232) conducted a sustained credential harvesting and authentication attack campaign over 48 hours, generating 981 security events with a 100/100 AbuseIPDB reputation score. The actor demonstrated advanced capab…