Suspected Port Scan Originating from Compromised Network Infrastructure

Arnold Chan@slaz

•updated Sep 4, 2026•0•0•2

Detects high-frequency TCP SYN connection attempts originating from an internal device, which is indicative of a port scanning behavior typically used for network service discovery.