← Back to feed
34.52.137.61
Location
🇧🇪 BE / Brussels
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
3
First / Last Seen
2026-05-17 00:53 — 2026-06-04 14:21
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
33 IPs
6159 events
2026-05-14 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
5 IPs
454 events
2026-05-09 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
35 IPs
6421 events
2026-05-05 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
10135 events
2026-05-04 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
56808 events
2026-05-03 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
29218 events
2026-03-22 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
192615 events
2026-03-19 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
198827 events
2026-03-19 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
59 IPs
12836 events
2026-03-15 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
28 IPs
4792 events
2026-03-15 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
30 IPs
20618 events
2026-03-15 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
5466 events
2026-03-15 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
43 IPs
29616 events
2026-03-09 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
25 IPs
14461 events
2026-03-09 — ongoing · 25 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
197 IPs
69212 events
2026-03-02 — ongoing · 197 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
195269 events
2026-03-02 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
195173 events
2026-03-02 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
34 IPs
8400 events
2026-03-02 — ongoing · 34 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
203 IPs
86822 events
2026-03-01 — ongoing · 203 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
AS396982 Google LLC
ASN
Active
medium
🇧🇪 BE
87 IPs
5150 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 87 IPs from the same network (Google LLC, AS396982) were active during overlapping time periods. Temporal correlation across …
Session Forensics
Sessions
4
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe
a057d96e07d8ed30
1
20%
Loading events...
MySQL Probe
3e1940cef49cd709
1
20%
Loading events...
FTP Probe
a0c08da0bd3e4f2f
1
20%
Loading events...
MySQL Probe
68c03b4536be4aec
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-06-04 14:21:22 | :3306 | mysql | MySQL connection | opencanary | sin |
| 2026-06-04 13:54:49 | :3306 | mysql | MySQL connection | opencanary | sea |
| 2026-05-31 04:52:23 | :21 | ftp | FTP connection | opencanary | ewr |
| 2026-05-17 00:53:05 | :3306 | mysql | MySQL connection | opencanary | sea |