← Back to feed

64.62.197.17

KNOWN SCANNER

scan-44a.shadowserver.org (shadowserver.org)

Threat Confidence

31%

Location

🇺🇸 US

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-02-25 05:55 — 2026-04-06 11:13

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-04-11 20:10

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

12 IPs 137 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×4

Sessions

Avg Depth Score

0.15

Commands Executed

Files Downloaded

Fingerprints

SSH Client

{w s\xfa\xb1s{{w\x81<\xb0\xa1\xb6\xb4\x85\xbbWi\x83\x9d\xfc\xf1\xc7\xcd\xa2Xb*5\xb1\xf7{nF\x83\x80\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{wpx\xa3\xbaُ\xea\xb0\xe7bJ!g\xf6\x98\x888\x93#\xca\xf8>'\xf8\xa4W\xedG#\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{wyv/_\xb0\xf4\xe9@}\xb0@\xe3n\xe4ӁF7O\xce˘BbI\xb8\xe6hz\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0

Evidence Timeline

Scanner 0750104fc9f9 w4m_singapore_01 · 2026-04-10 01:44

15%

Loading events...

Scanner e81866ba4948 w4m_seattle_01 · 2026-04-06 11:13

15%

Loading events...

Scanner 279ed06b59c8 w4m_seattle_01 · 2026-03-20 11:03

15%

Loading events...

Scanner c5dd57784637 w4m_singapore_01 · 2026-02-25 05:55

15%

Loading events...