← Back to feed

Subnet 45.78.224.0/24

SUBNET Ended high

Why this campaign was detected

3 IPs from the same /24 subnet (45.78.224.0/24) were observed attacking our sensors within the same time window. All belong to Byteplus Pte. Ltd. (AS150436). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.

Primary ASN

AS150436 · Byteplus Pte. Ltd.

Subnet

45.78.224.0/24

Country

🇸🇬 SG

Cloud Provider

—

Member Count

3 IPs

Below average

Total Events

393

Below average by volume

Started / Ended

2026-09-28 05:15 — ongoing

Attack Types

ssh:bruteforce ssh:intrusion telnet:bruteforce telnet:intrusion

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Execution

T1059.004

Credential Access

T1110 T1110.001

Member Actors

IP Address	Behavior	Confidence	Events	Agents	Attack Types	Hostname	Last Seen
45.78.224.85	credential_harvester	69%	159	3	ssh:bruteforcessh:intrusiontelnet:bruteforcetelnet:intrusion	—	2026-10-07 21:56	evidence →
45.78.224.198	credential_harvester	61%	164	3	telnet:bruteforcetelnet:intrusion	—	2026-10-07 01:09	evidence →
45.78.224.87	interactive_operator	35%	70	1	telnet:intrusion	—	2026-10-05 08:09	evidence →

VPN Known VPN or proxy provider

DROP ASN on Spamhaus DROP list

Nx OSINT Corroborated by N external threat feeds