← Back to feed
Location
🇺🇸 US
ASN
AS6939 · Hurricane Electric LLC
Cloud Provider
—
Total Events
10
Below average by volume
Agent Count
3
First / Last Seen
2026-04-25 10:01 — 2026-06-03 09:50
Attack Types
MITRE ATT&CK Techniques
Initial Access
Discovery
External Corroboration
DShield Top Attackers
dshield:top_attacker
Campaigns
Multi-Agent Scan
SCAN
Active
medium
19 IPs
33861 events
2026-03-17 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
189109 events
2026-03-05 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
187456 events
2026-03-05 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 64.62.197.0/24
SUBNET
Active
high
🇺🇸 US
14 IPs
110 events
http:scanssh:bruteforce
2026-02-18 — ongoing · 14 IPs from the same /24 subnet (64.62.197.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
Sessions
6
Avg Depth Score
0.22
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH Client
Evidence Timeline
Web Probe
e8169f93c416ea58
25%
Loading events...
Scanner
1936c4f1f93b
15%
Loading events...
GET / HTTP/1.1
Web Probe
369c1e4e56b245b2
25%
Loading events...
Scanner
c65b6e15dbb3
15%
Loading events...
GET / HTTP/1.1
Web Probe
5efb15bd9e258c76
25%
Loading events...
Web Probe
72a9a78ac11a2760
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-06-03 09:50:39 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-05-06 10:47:13 | :80 | http | HTTP GET request | opencanary | sea |
| 2026-05-03 02:25:35 | :80 | http | HTTP GET request | opencanary | sea |
| 2026-04-25 10:01:24 | :80 | http | HTTP GET request | opencanary | ewr |