← Back to feed

64.62.197.77

KNOWN SCANNER

scan-46a.shadowserver.org (shadowserver.org)

Threat Confidence

10%

Location

🇺🇸 US

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-02-26 05:52 — 2026-04-16 00:05

Attack Types

http:scan ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1190

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-04-19 08:31

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

9 IPs 111 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×4 web_probe ×1

Sessions

Avg Depth Score

0.17

Commands Executed

Files Downloaded

Fingerprints

SSH Client

{wV\xd7\\x8e\xef\xae\xce,\xb8\xc3V]\xa8\xad\xdeX\xf3a\xd1\xc2\xcc\xf3ǌ 7\xc3\xfd\xfb\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{w\x8c\x88\xbc\xedf\xb4\xa8\xc1_\xc2s~\xa5\x96OR.\x81\x8fVRpq\x89 \xc6~'\xff\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{wj\xa4\xb9)\xa7\xf7M\x81/k\xd4J\x92\xa8\xa9M\x87\xd5\xf3$\xafD\x8c\x9b\xfd\xfd\xf0GET / HTTP/1.1

Evidence Timeline

Scanner fc6f064a1c62 w4m_singapore_01 · 2026-04-17 11:18

15%

Loading events...

Web Probe 93ce5a960c63a62a w4m_seattle_01 · 2026-04-16 00:05

25%

Loading events...

Scanner 050ccf422723 w4m_singapore_01 · 2026-04-12 11:24

15%

Loading events...

Scanner 4afe53aa916b w4m_seattle_01 · 2026-03-02 10:40

15%

Loading events...

Scanner 765c4fb29a61 w4m_seattle_01 · 2026-02-26 05:52

15%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-04-16 00:05:02	:80	http	HTTP GET request	opencanary	sea