← Back to feed
Subnet 198.51.100.0/24
SUBNET Ended highWhy this campaign was detected
50 IPs from the same /24 subnet (198.51.100.0/24) were observed attacking our sensors within the same time window. Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
—
Subnet
198.51.100.0/24
Country
—
Cloud Provider
—
Member Count
50 IPs
Average
Total Events
50
Below average by volume
Started / Ended
2026-02-25 14:00 — 2026-04-05 21:00
Attack Types
MITRE ATT&CK Techniques
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 198.51.100.1 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.2 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.3 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.4 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.5 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.6 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.7 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.8 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.9 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.10 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.11 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.12 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.13 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.14 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.15 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.16 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.17 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.18 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.19 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.20 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.21 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.22 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.23 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.24 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.25 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.26 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.27 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.28 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.29 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.30 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.31 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.32 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.33 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.34 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.35 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.36 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.37 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.38 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.39 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.40 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.41 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.42 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.43 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.44 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.45 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.46 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.47 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.48 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.49 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → | |
| 198.51.100.50 | ssh:bruteforce | 19% | 1 | 1 | ssh:bruteforce | — | 2026-02-25 14:00 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds