IntrusionLabs IntrusionLabs
← Back to feed

65.49.1.80

Threat Confidence
54%
Location
🇺🇸 US
ASN
AS6939 · Hurricane Electric LLC
Cloud Provider
—
Total Events
8
Below average by volume
Agent Count
2
First / Last Seen
2026-03-19 00:03 — 2026-04-17 08:57
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
CINS Army
Reported 2026-04-17 11:56
cins:bad_reputation
DShield Top Attackers
Reported 2026-04-17 11:55
dshield:top_attacker
Campaigns
Multi-Agent Scan SCAN Active medium
80 IPs 139777 events
2026-03-01 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 139684 events
2026-03-01 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 139664 events
2026-03-01 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 139772 events
2026-03-01 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
58 IPs 47750 events
2026-03-01 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 65.49.1.0/24 SUBNET Active high 🇺🇸 US
11 IPs 41 events
http:scanssh:bruteforce
2026-02-19 — ongoing · 11 IPs from the same /24 subnet (65.49.1.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
scanner ×3 web_probe ×2
Sessions
5
Avg Depth Score
0.19
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH Client
{wF7\xcf\xfcGET / HTTP/1.1
Evidence Timeline
Scanner 26024030cc90 w4m_seattle_01 · 2026-04-17 08:57
15%
Loading events...
Web Probe 7fab6d25cedbf348 w4m_singapore_01 · 2026-04-17 00:04
25%
Loading events...
Scanner 386cbf1fafd1 w4m_singapore_01 · 2026-04-16 01:36
15%
Loading events...
Scanner 93aaa13060d3 w4m_singapore_01 · 2026-04-11 11:13
15%
Loading events...
Web Probe 8962fd6da23aa295 w4m_singapore_01 · 2026-03-19 00:03
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-04-17 00:04:00 :80 http HTTP GET request opencanary sin
2026-03-19 00:03:40 :80 http HTTP GET request opencanary sin