Threat signatureMediumReconnaissance

port_scan

IPs conducting port scanning across the internet, probing for open services and vulnerabilities. Includes both malicious scanners and research scanners (Shodan, Censys).

Related signatures

ssh_brute_forceweb_attackmulti_source_abuse

Check an IP for this and every other signature.

FFraud returns the exact threat tags on any IP, free and without a key. The confirmed addresses, with their worst category, are also on GitHub as open data.