← Back to feed

184.105.247.194

KNOWN SCANNER

scan-13.shadowserver.org (shadowserver.org)

Threat Confidence

10%

Location

🇺🇸 US / Shawnee

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-02-26 10:22 — 2026-04-13 08:14

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

CINS Army

Reported 2026-04-19 08:33

cins:bad_reputation

DShield Top Attackers

Reported 2026-04-19 08:31

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

9 IPs 111 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×3

Sessions

Avg Depth Score

0.15

Commands Executed

Files Downloaded

Fingerprints

SSH Client

{w\xed\xe8\xfb\xe4\x8ck_\x8bd\xb4B\xa7Z\xab\xed\xff\x81\xf0:\x8dN\x9eC\xf2\xc7a\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{w\xf6f\xf2\xf4\xf7\xbe=\xf5\x81\xe9\xb5 \xabeGET / HTTP/1.1

Evidence Timeline

Scanner 3d7aa7b8c77b w4m_singapore_01 · 2026-04-13 08:14

15%

Loading events...

Scanner 4fb995bcb089 w4m_singapore_01 · 2026-04-02 08:47

15%

Loading events...

Scanner 2f30f82fa7e2 w4m_seattle_01 · 2026-02-26 10:22

15%

Loading events...