← Back to feed

167.94.146.52

Threat Confidence
41%
Location
🇺🇸 US
ASN
AS398705 · Censys, Inc.
Cloud Provider
—
Total Events
5
Below average by volume
Agent Count
2
First / Last Seen
2026-03-12 01:46 — 2026-03-20 23:57
Attack Types
http:scan ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-03-27 20:05
blocklist_de:reported
CINS Army
Reported 2026-03-27 20:04
cins:bad_reputation
DShield Top Attackers
Reported 2026-03-27 20:05
dshield:top_attacker
Campaigns
Subnet 167.94.146.0/24
SUBNET · 5 IPs · 20 events
Session Forensics
scanner ×1 unknown ×1
Sessions
2
Avg Depth Score
0.12
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
873a5fb5fedc2d4f8638ebde4abc6cfc
SSH Client
SSH-2.0-Go
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-03-20 23:57:28 :80 http HTTP GET request sea
2026-03-12 01:47:00 :22 ssh cowrie.session.closed sin
2026-03-12 01:46:44 :22 ssh cowrie.client.kex sin
2026-03-12 01:46:44 :22 ssh cowrie.client.version sin
2026-03-12 01:46:44 :22 ssh cowrie.session.connect sin