← Back to feed

AS30058 FDCservers.net

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (FDCservers.net, AS30058) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS30058 · FDCservers.net
Subnet
Country
πŸ‡ΊπŸ‡Έ US
Cloud Provider
Member Count
5 IPs
Below average
Total Events
3684
Below average by volume
Started / Ended
2026-04-13 03:50 — 2026-08-14 09:31
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
50.7.233.211 credential_harvester 37% 1202 2 ssh:bruteforce β€” 2026-07-08 00:38 evidence →
50.7.127.99 credential_harvester 37% 1089 2 ssh:bruteforce β€” 2026-07-08 09:22 evidence →
23.237.188.34 credential_harvester 37% 1072 2 ssh:bruteforce β€” 2026-06-30 00:02 evidence →
66.90.98.90 credential_harvester 35% 534 2 ssh:bruteforce β€” 2026-06-23 11:22 evidence →
192.240.99.74 credential_harvester 32% 98 2 ssh:bruteforce β€” 2026-07-02 21:23 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics β€” cookieless, public pages only. The context processor withholds the token from authenticated requests. #}