← Back to feed
34.62.19.22
22.19.62.34.bc.googleusercontent.com
(googleusercontent.com)
✓ FCrDNS
Assessment
Port and service scanner
- Part of a 278-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇧🇪 BE / Brussels
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
69
Above average by volume
Agent Count
2
First / Last Seen
2026-10-22 04:23 — 2026-10-22 06:11
Attack Types
MITRE ATT&CK Techniques
External Corroboration
DShield Top Attackers
dshield:top_attacker
Campaigns
Multi-Agent Scan
SCAN
Active
medium
259 IPs
846281 events
2026-09-14 — ongoing · 259 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
4 IPs
120 events
2026-04-10 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
162 IPs
770584 events
2026-03-21 — ongoing · 162 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
214 IPs
737107 events
2026-03-09 — ongoing · 214 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
278 IPs
814417 events
2026-03-09 — ongoing · 278 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS396982 Google LLC
ASN
Active
medium
🇧🇪 BE
180 IPs
26174 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-02-18 — ongoing · 180 IPs from the same network (Google LLC, AS396982) were active during overlapping time periods. Temporal correlation across …
Session Forensics
Sessions
33
Avg Depth Score
0.16
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner
588672996c89
15%
Loading events...
Scanner
d932148fced8
15%
Loading events...
Scanner
a64ef30d1124
15%
Loading events...
Scanner
77d998b16a93
15%
Loading events...
Scanner
44cdbf8d84e4
15%
Loading events...
Scanner
e81dd9b461d9
15%
Loading events...
Scanner
fff4ec9bc3e6
15%
Loading events...
Scanner
d8cf12ba6006
15%
Loading events...
Scanner
0cad21fe202f
15%
Loading events...
Scanner
053df4e570c2
15%
Loading events...
Scanner
3f90144d0304
15%
Loading events...
Scanner
8e49574c52af
15%
Loading events...
Scanner
bc7e44baecc9
15%
Loading events...
Scanner
423f64a67354
15%
Loading events...
Credential Probe
21febf108abf
1
20%
Loading events...
Scanner
15956b47c50a
15%
Loading events...
Scanner
39db2b61a4f7
15%
Loading events...
Scanner
f23a3e35d11b
15%
Loading events...
Scanner
170e545993aa
15%
Loading events...
Scanner
84371bbd0f1e
15%
Loading events...
Scanner
46b2cd137919
15%
Loading events...
Credential Probe
95ddc092450a
1
20%
Loading events...
Scanner
ba3313fa2f49
15%
Loading events...
Scanner
f0a9e14f28d3
15%
Loading events...
Scanner
63c06642d03e
15%
Loading events...
Scanner
16cac10ad4e3
15%
Loading events...
Scanner
df48f911647f
15%
Loading events...
Scanner
10a2ed8d08ae
15%
Loading events...
Scanner
9349899a3a94
15%
Loading events...
Scanner
1d25f3be2bb5
15%
Loading events...
Credential Probe
e7014fb89ba6
2
25%
Loading events...
Scanner
37128e25b778
15%
Loading events...
FTP Probe
e7480268cd1927f2
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-10-22 04:23:21 | :21 | ftp | FTP connection | opencanary | ewr |