Back to ffraud
Threat signatureMediumReconnaissance

port_scan

IPs conducting port scanning across the internet, probing for open services and vulnerabilities. Includes both malicious scanners and research scanners (Shodan, Censys).

Related signatures
ssh_brute_forceweb_attackmulti_source_abuse

Check an IP for this and every other signature.

ffraud returns the exact threat tags on any IP, free, no key needed. Or pull the whole labelled dataset from GitHub.