← Back to feed

45.138.12.48

Threat Confidence
42%
Assessment
  • Part of a 268-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇱🇹 LT
ASN
AS218785 · Tc Datacenter Limited
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
2
First / Last Seen
2026-10-26 04:20 — 2026-10-28 16:49
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Blocklist.de
Reported 2026-10-28 18:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
51 IPs 57530 events
2026-09-29 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
124 IPs 127331 events
2026-09-24 — ongoing · 124 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 45.138.12.0/24 SUBNET Active high 🇱🇹 LT
11 IPs 128 events
http:scan
2026-09-22 — ongoing · 11 IPs from the same /24 subnet (45.138.12.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
256 IPs 577603 events
2026-07-13 — ongoing · 256 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
268 IPs 856227 events
2026-03-29 — ongoing · 268 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 94934 events
2026-03-12 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 19995 events
2026-03-01 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
236 IPs 744738 events
2026-02-28 — ongoing · 236 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 157891 events
2026-02-28 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
129 IPs 560374 events
2026-02-28 — ongoing · 129 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×4
Sessions
4
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 3a29e26f5e9ac730 greencloud_phx_01 · 2026-10-28 16:49
25%
Loading events...
Web Probe 2506ef884d2ba56c greencloud_phx_01 · 2026-10-28 16:49
25%
Loading events...
Web Probe f927362e888084b0 newark_01 · 2026-10-26 04:20
25%
Loading events...
Web Probe d3d2a65048d3b363 newark_01 · 2026-10-26 04:20
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-28 16:49:39 :80 http HTTP GET request opencanary phx
2026-10-28 16:49:36 :80 http HTTP GET request opencanary phx
2026-10-26 04:20:05 :80 http HTTP GET request opencanary ewr
2026-10-26 04:20:01 :80 http HTTP GET request opencanary ewr