← Back to feed

45.138.12.16

Threat Confidence

44%

Assessment

Part of a 327-IP campaign probing the same targets.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇱🇹 LT

ASN

AS218785 · Tc Datacenter Limited

Cloud Provider

—

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-10-27 22:08 — 2026-10-27 22:12

Attack Types

http:scan

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1190

External Corroboration

Blocklist.de

Reported 2026-10-28 00:01

blocklist_de:reported

DShield Top Attackers

Reported 2026-10-27 06:01

dshield:top_attacker

Campaigns

Multi-Agent Scan SCAN Active medium

304 IPs 1146696 events

2026-10-26 — ongoing · 304 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

89 IPs 113399 events

2026-09-29 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …

Subnet 45.138.12.0/24 SUBNET Active high 🇱🇹 LT

11 IPs 124 events

http:scan

2026-09-22 — ongoing · 11 IPs from the same /24 subnet (45.138.12.0/24) were observed attacking our sensors within the same time window. …

Multi-Agent Scan SCAN Active medium

311 IPs 890898 events

2026-06-07 — ongoing · 311 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

327 IPs 1117537 events

2026-03-09 — ongoing · 327 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

231 IPs 923283 events

2026-03-09 — ongoing · 231 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Session Forensics

web_probe ×2

Sessions

Avg Depth Score

0.25

Commands Executed

Files Downloaded

Evidence Timeline

Web Probe ccbf0fac1ab03abb greencloud_phx_01 · 2026-10-27 22:12

25%

Loading events...

Web Probe ca57f775289040c3 w4m_seattle_01 · 2026-10-27 22:08

25%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-10-27 22:12:12	:80	http	HTTP GET request	opencanary	phx
2026-10-27 22:08:53	:80	http	HTTP GET request	opencanary	sea