← Back to feed

216.180.246.81

KNOWN SCANNER TAGGED BENIGN how we decide →
Why: Known research scanner (Nokia Deepfield), inside the IP ranges it publishes
crawler081.deepfield.net (deepfield.net) ✓ FCrDNS
Threat Confidence
10%
Assessment
Port and service scanner
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US
ASN
AS396982 · Google LLC
Cloud Provider
—
Scanner Organization
Nokia Deepfield
per its published IP ranges
Total Events
22
Average by volume
Agent Count
1
First / Last Seen
2026-10-10 19:17 — 2026-10-10 19:33
Attack Types
ssh:connection telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Discovery
External Corroboration
Blocklist.de
Reported 2026-10-19 05:01
blocklist_de:reported
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×10
Sessions
10
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
SSH-2.0-Go
Evidence Timeline
Scanner 23be4f970e68 w4m_singapore_01 · 2026-10-10 19:32
15%
Loading events...
Scanner 5153c528bf71 w4m_singapore_01 · 2026-10-10 19:32
15%
Loading events...
Scanner 99d56227049a w4m_singapore_01 · 2026-10-10 19:23
15%
Loading events...
Scanner d04358d188b4 w4m_singapore_01 · 2026-10-10 19:22
15%
Loading events...
Scanner 648b616f7355 w4m_singapore_01 · 2026-10-10 19:20
15%
Loading events...
Scanner f33123528f29 w4m_singapore_01 · 2026-10-10 19:21
15%
Loading events...
Scanner 7032e1c0dcb9 w4m_singapore_01 · 2026-10-10 19:20
15%
Loading events...
Scanner 3709d33bbd3d w4m_singapore_01 · 2026-10-10 19:19
15%
Loading events...
Scanner fbe65195c388 w4m_singapore_01 · 2026-10-10 19:18
15%
Loading events...
Scanner f6611f3a0a71 w4m_singapore_01 · 2026-10-10 19:17
15%
Loading events...