Latest known Scanner Source IP Match

Ankit Mehta@Secvyn

•updated Sep 8, 2026•2•0•1

This rule monitors network traffic from internal devices and security logs for communication with a curated list of known malicious or suspicious scanner IP addresses, indicating potential reconnaissance or probing activity by external actors.