IntrusionLabs IntrusionLabs
← Back to feed

198.235.24.7

Threat Confidence
19%
Location
🇺🇸 US
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
5
Below average by volume
Agent Count
1
First / Last Seen
2026-04-27 01:33 — 2026-05-19 02:13
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 198.235.24.0/24 SUBNET Active high 🇺🇸 US
38 IPs 310 events
http:scanssh:bruteforce
2026-02-18 — ongoing · 38 IPs from the same /24 subnet (198.235.24.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
web_probe ×6
Sessions
6
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe b6e9521a11d73d42 newark_01 · 2026-05-22 08:56
25%
Loading events...
Web Probe cb334008c04ae318 newark_01 · 2026-05-19 02:13
25%
Loading events...
Web Probe 73299d269436ad64 newark_01 · 2026-05-04 08:56
25%
Loading events...
Web Probe d6230493d34069fd newark_01 · 2026-04-30 10:33
25%
Loading events...
Web Probe e551fe3a2c7318a4 newark_01 · 2026-04-30 01:15
25%
Loading events...
Web Probe b5e333556affd626 newark_01 · 2026-04-27 01:33
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-22 08:56:24 :80 http HTTP GET request opencanary ewr
2026-05-19 02:13:39 :80 http HTTP GET request opencanary ewr
2026-05-04 08:56:03 :80 http HTTP GET request opencanary ewr
2026-04-30 10:33:24 :80 http HTTP GET request opencanary ewr
2026-04-30 01:15:00 :80 http HTTP GET request opencanary ewr
2026-04-27 01:33:49 :80 http HTTP GET request opencanary ewr