← Back to feed

Subnet 193.235.141.0/24

SUBNET Ended high
Why this campaign was detected
3 IPs from the same /24 subnet (193.235.141.0/24) were observed attacking our sensors within the same time window. All belong to Internet Vikings International AB (AS51747). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS51747 · Internet Vikings International AB
Subnet
193.235.141.0/24
Country
πŸ‡ΈπŸ‡ͺ SE
Cloud Provider
Member Count
3 IPs
Below average
Total Events
3
Below average by volume
Started / Ended
2026-08-08 21:49 — ongoing
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
193.235.141.181 web_probe 13% 1 1 http:scan β€” 2026-08-23 05:25 evidence →
193.235.141.176 web_probe 13% 1 1 http:scan β€” 2026-08-24 02:44 evidence →
193.235.141.212 web_probe 13% 1 1 http:scan β€” 2026-08-26 15:56 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics β€” cookieless, public pages only. The context processor withholds the token from authenticated requests. #}