IntrusionLabs IntrusionLabs
← Back to feed

45.198.224.19

Threat Confidence
16%
Location
🇺🇸 US
ASN
AS215925 · Vpsvault.host Ltd
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
1
First / Last Seen
2026-06-17 13:23 — 2026-06-23 00:52
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 45.198.224.0/24 SUBNET Ended high 🇺🇸 US
3 IPs 19527 events
http:scanssh:bruteforce
2026-06-15 — ongoing · 3 IPs from the same /24 subnet (45.198.224.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
web_probe ×6
Sessions
6
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 4b91cdc9680f59c1 w4m_seattle_01 · 2026-06-23 00:52
1 25%
Loading events...
Web Probe 5978b85f1af3a42f w4m_seattle_01 · 2026-06-23 00:52
25%
Loading events...
Web Probe 36009c0c4542802c w4m_seattle_01 · 2026-06-18 06:57
1 25%
Loading events...
Web Probe 0d122a79f453320a w4m_seattle_01 · 2026-06-18 06:56
25%
Loading events...
Web Probe 55aecdeaf30aac95 w4m_seattle_01 · 2026-06-17 13:24
1 25%
Loading events...
Web Probe 45f2d2d036376349 w4m_seattle_01 · 2026-06-17 13:23
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-06-23 00:52:28 :80 http HTTP POST login opencanary sea
2026-06-23 00:52:20 :80 http HTTP GET request opencanary sea
2026-06-18 06:57:05 :80 http HTTP POST login opencanary sea
2026-06-18 06:56:52 :80 http HTTP GET request opencanary sea
2026-06-17 13:24:02 :80 http HTTP POST login opencanary sea
2026-06-17 13:23:46 :80 http HTTP GET request opencanary sea