← Back to feed

192.42.116.48

TAGGED SUSPICIOUS how we decide →
Threat Confidence
42%
Location
🇳🇱 NL
ASN
AS215125 · Church of Cyberology
Cloud Provider
Total Events
10
Average by volume
Agent Count
1
First / Last Seen
2026-08-26 21:17 — 2026-08-26 21:18
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Credential Access
Command and Control
External Corroboration
Blocklist.de
Reported 2026-09-01 10:01
blocklist_de:reported
Tor Exit Nodes
Reported 2026-08-31 21:34
tor:exit_node
Campaigns
Multi-Agent Scan SCAN Active medium
28 IPs 48120 events
2026-07-01 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
21 IPs 14290 events
2026-06-24 — ongoing · 21 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Subnet 192.42.116.0/24 SUBNET Active high 🇳🇱 NL
3 IPs 151 events
http:scanssh:bruteforce
2026-04-11 — ongoing · 3 IPs from the same /24 subnet (192.42.116.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
26 IPs 53230 events
2026-03-31 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 43528 events
2026-03-20 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 93902 events
2026-03-20 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
41 IPs 196106 events
2026-03-09 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
105 IPs 441937 events
2026-03-09 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
67 IPs 307830 events
2026-03-09 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
94 IPs 338397 events
2026-03-09 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
16 IPs 48535 events
2026-03-09 — ongoing · 16 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
87 IPs 341761 events
2026-03-09 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
56 IPs 338132 events
2026-03-09 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
64 IPs 289079 events
2026-03-09 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 246773 events
2026-02-24 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
49 IPs 54539 events
2026-02-23 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
51 IPs 64370 events
2026-02-23 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
68 IPs 68773 events
2026-02-23 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
77 IPs 187463 events
2026-02-23 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 305006 events
2026-02-23 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
69 IPs 298618 events
2026-02-23 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
36 IPs 12501 events
2026-02-23 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
proxy_abuser ×2
Sessions
2 (2 with login)
Avg Depth Score
0.85
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-OpenSSH_10.5
t12d3112h2_e8f1e7e78f70_64f78f54e6a2
Evidence Timeline
Proxy Abuser c94ceb3d2d50 w4m_singapore_01 · 2026-08-30 20:12
2 85%
Loading events...
Proxy Abuser d4a3c10f1074 newark_01 · 2026-08-26 21:17
2 85%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}