← Back to feed

65.49.1.152

KNOWN SCANNER

scan-71-00.shadowserver.org (shadowserver.org)

Threat Confidence

47%

Location

🇺🇸 US

ASN

AS6939 · Hurricane Electric LLC

Cloud Provider

—

Scanner Organization

Shadowserver Foundation

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-02-23 05:51 — 2026-04-11 02:28

Attack Types

http:scan ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1190

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-04-11 20:10

dshield:top_attacker

Campaigns

Shadowserver Foundation SCANNER Active high 🇺🇸 US

12 IPs 137 events

http:scanssh:bruteforce

2026-02-23 — ongoing

Session Forensics

scanner ×2 unknown ×1

Sessions

Avg Depth Score

0.13

Commands Executed

Files Downloaded

Fingerprints

SSH Client

GET / HTTP/1.1

Evidence Timeline

Unknown 1d66fcb503e96f45 w4m_singapore_01 · 2026-04-11 02:28

10%

Loading events...

Scanner ef9ffa91b196 w4m_seattle_01 · 2026-04-09 01:34

15%

Loading events...

Scanner 9ae246a800b1 w4m_seattle_01 · 2026-02-23 05:51

15%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-04-11 02:28:57	:80	http	HTTP GET request	opencanary	sin