← Back to feed

AS212552 BitCommand LLC

ASN Active medium
Why this campaign was detected
7 IPs from the same network (BitCommand LLC, AS212552) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS212552 · BitCommand LLC
Subnet
Country
🇩🇪 DE
Cloud Provider
Member Count
7 IPs
Below average
Total Events
792
Below average by volume
Started / Ended
2026-05-22 05:30 — ongoing
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
82.115.25.70 credential_harvester 65% 1x OSINT 132 2 ssh:bruteforce 2026-05-30 15:58 evidence →
154.211.2.151 credential_harvester 59% 1x OSINT 137 2 ssh:bruteforce 2026-05-27 07:17 evidence →
82.115.17.167 opportunistic_bruter 57% 1x OSINT 46 2 ssh:bruteforce 2026-05-27 04:18 evidence →
193.36.84.88 credential_harvester 53% 1x OSINT 207 1 ssh:bruteforce 2026-05-28 07:31 evidence →
185.221.237.10 credential_harvester 53% 1x OSINT 170 1 ssh:bruteforce 2026-05-28 11:10 evidence →
103.75.199.4 credential_harvester 42% 1x OSINT 77 1 ssh:bruteforce 2026-05-28 23:59 evidence →
156.255.1.208 opportunistic_bruter 39% 23 1 ssh:bruteforce 2026-05-25 10:33 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds