← Back to feed

64.62.156.52

KNOWN SCANNER

scan-63-0.shadowserver.org (shadowserver.org)

Threat Confidence

31%

Location

🇺🇸 US / Minneapolis

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-02-28 08:18 — 2026-04-06 11:13

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-04-11 20:04

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

12 IPs 137 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×3

Sessions

Avg Depth Score

0.15

Commands Executed

Files Downloaded

Fingerprints

SSH Client

{w?{*\xd24T\xf4\xdd>\xcaZJ\xf3ąʖ\xb5\xb3\x80\x99{t\xac\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0GET / HTTP/1.1

Evidence Timeline

Scanner ea8f5c02de45 w4m_seattle_01 · 2026-04-06 11:13

15%

Loading events...

Scanner 2cea22dc9d5a w4m_seattle_01 · 2026-03-10 10:50

15%

Loading events...

Scanner a72feffa99b9 w4m_singapore_01 · 2026-02-28 08:18

15%

Loading events...