← Back to feed

16.5.0.240

Threat Confidence
49%
Location
🇧🇷 BR / São Paulo
ASN
AS401661 · AS401661
Cloud Provider
Total Events
16
Average by volume
Agent Count
2
First / Last Seen
2026-09-19 10:25 — 2026-09-19 16:46
Attack Types
ssh:bruteforce telnet:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Discovery
External Corroboration
CINS Army
Reported 2026-09-19 17:02
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
115 IPs 334651 events
2026-09-16 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 311734 events
2026-08-04 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
128 IPs 403576 events
2026-05-25 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
90 IPs 72691 events
2026-05-19 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 3590 events
2026-04-15 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
128 IPs 390788 events
2026-03-21 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
163 IPs 474347 events
2026-02-26 — ongoing · 163 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
28 IPs 8379 events
2026-02-22 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
scanner ×6
Sessions
6
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-FlowIQ_1.0
Evidence Timeline
Scanner 81d1dab97f21 w4m_seattle_01 · 2026-09-19 16:46
15%
Loading events...
Scanner c25c09fc3d2a w4m_seattle_01 · 2026-09-19 16:46
15%
Loading events...
Scanner 79335661ce79 w4m_seattle_01 · 2026-09-19 16:45
15%
Loading events...
Scanner f3eeaac243be newark_01 · 2026-09-19 10:26
15%
Loading events...
Scanner 98aa66a47042 newark_01 · 2026-09-19 10:25
15%
Loading events...
Scanner 4fea0513f95f newark_01 · 2026-09-19 10:25
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}