Threat Intelligence Feed — Tag: reconnaissance

IP address 71.6.199.23 conducted a sustained 7-week reconnaissance campaign targeting industrial control systems, focusing on Modbus protocol enumeration and MQTT services with 69 recorded events between February 17 and April 6, 2026. The sophisticated targeting of operational technology protocols i…

IP address 66.132.153.130 conducted sustained reconnaissance and scanning activities against multiple targets from March 3-12, 2026, generating 118 security events across web services and infrastructure ports. The activity demonstrates medium-severity automated scanning behavior with focus on servic…