ATT&CK technique
View on MITRE ATT&CK →
T1590.005
IP Addresses
Reconnaissance
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Cisco NVM - Suspicious Network Connection to IP Lookup Service API | production | 2026-09-22 |
| splunk | Windows Gather Victim Network Info Through Ip Check Web Services | production | 2026-07-20 |
| splunk | Cisco ASA - Reconnaissance Command Activity | production | 2026-05-13 |
| splunk | Wermgr Process Connecting To IP Check Web Services | production | 2026-05-13 |