Threat LevelMEDIUM45/1001 rule type

2 incidents on record · active over 2 days · last seen 23d ago

PTR	N/A
Org / ASN	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Country	🇨🇳 China
City	Beijing, Beijing
Timezone	Asia/Shanghai

Attack Analysis

🇨🇳 China · Beijing · 141679 · Eleven Street,no. 18 Institute of Jingdong Headquarters

IDS: Database Port Scan

Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Reports (2)

Date	Severity	Description
8 Jul 2026 - 23:30	high	IDS: Database port scan — ET SCAN Suspicious inbound to MSSQL port 1433
6 Jul 2026 - 15:00	high	IDS: Database port scan — ET SCAN Suspicious inbound to MSSQL port 1433

Report for IP: 111.228.48.181

Attack Analysis

Reports (2)