← Back to feed

64.62.197.122

KNOWN SCANNER

scan-40a.shadowserver.org (shadowserver.org)

Threat Confidence

42%

Location

🇺🇸 US

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-03-06 01:29 — 2026-04-09 02:32

Attack Types

http:scan ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1190

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-04-11 20:04

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

12 IPs 137 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×1 unknown ×4

Sessions

Avg Depth Score

0.11

Commands Executed

Files Downloaded

Fingerprints

SSH Client

{w5Zg\xe9"\xf7S?\xc1\xe7\xd6\xdd\xe0\xe8\xe1|\x95f\x84\x8a\x90\xca7\xd5\xcd9\xa9\xaf\xd3\xfd\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0

Evidence Timeline

Unknown 9c1341d2fac98d51 w4m_seattle_01 · 2026-04-09 02:32

10%

Loading events...

Unknown 766958f6a194518a w4m_singapore_01 · 2026-03-20 02:28

10%

Loading events...

Unknown 16fac8280c86a305 w4m_singapore_01 · 2026-03-17 09:43

10%

Loading events...

Unknown 0e5a6178025a959e w4m_singapore_01 · 2026-03-15 00:04

10%

Loading events...

Scanner 65257e653554 w4m_seattle_01 · 2026-03-06 01:29

15%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-04-09 02:32:09	:80	http	HTTP GET request	opencanary	sea
2026-03-20 02:28:51	:80	http	HTTP GET request	opencanary	sin
2026-03-17 09:43:35	:80	http	HTTP GET request	opencanary	sin
2026-03-15 00:04:27	:80	http	HTTP GET request	opencanary	sin