← Back to feed
Subnet 45.115.26.0/24
SUBNET Active highWhy this campaign was detected
26 IPs from the same /24 subnet (45.115.26.0/24) were observed attacking our sensors within the same time window. All belong to SolidCore Hosting LTD (AS199457). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS199457 · SolidCore Hosting LTD
Subnet
45.115.26.0/24
Country
🇭🇰 HK
Cloud Provider
—
Member Count
26 IPs
Below average
Total Events
36199
Average by volume
Started / Ended
2026-10-05 10:25 — ongoing
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 45.115.26.155 | reconnaissance | 62% | DROP | 5656 | 2 | ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion | — | 2026-10-19 07:17 | evidence → |
| 45.115.26.34 | reconnaissance | 62% | DROP | 729 | 2 | ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion | — | 2026-10-19 04:00 | evidence → |
| 45.115.26.22 | reconnaissance | 61% | DROP | 3685 | 2 | ssh:bruteforcessh:connectionssh:intrusionssh:malware | — | 2026-10-17 13:20 | evidence → |
| 45.115.26.39 | opportunistic_bruter | 59% | DROP | 164 | 2 | ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion | — | 2026-10-19 06:45 | evidence → |
| 45.115.26.23 | scanner | 59% | DROP | 1073 | 2 | ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion | — | 2026-10-17 12:23 | evidence → |
| 45.115.26.42 | scanner | 59% | DROP | 844 | 2 | ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion | — | 2026-10-17 12:02 | evidence → |
| 45.115.26.20 | scanner | 46% | DROP1x OSINT | 776 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 11:44 | evidence → |
| 45.115.26.38 | scanner | 45% | DROP | 1211 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-19 07:35 | evidence → |
| 45.115.26.36 | reconnaissance | 45% | DROP | 1654 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-19 06:30 | evidence → |
| 45.115.26.35 | scanner | 45% | DROP | 4502 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-19 05:47 | evidence → |
| 45.115.26.27 | scanner | 45% | DROP1x OSINT | 398 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 12:23 | evidence → |
| 45.115.26.33 | scanner | 44% | DROP | 606 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-19 02:33 | evidence → |
| 45.115.26.26 | scanner | 43% | DROP | 296 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-19 08:15 | evidence → |
| 45.115.26.41 | scanner | 42% | DROP | 4324 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 13:25 | evidence → |
| 45.115.26.43 | scanner | 42% | DROP | 2004 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 13:25 | evidence → |
| 45.115.26.28 | reconnaissance | 42% | DROP | 1907 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 11:50 | evidence → |
| 45.115.26.30 | scanner | 42% | DROP | 850 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 12:17 | evidence → |
| 45.115.26.31 | reconnaissance | 41% | DROP | 718 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 11:33 | evidence → |
| 45.115.26.32 | reconnaissance | 41% | DROP | 2298 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 02:57 | evidence → |
| 45.115.26.24 | scanner | 41% | DROP | 635 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 13:03 | evidence → |
| 45.115.26.37 | scanner | 41% | DROP | 587 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 13:24 | evidence → |
| 45.115.26.44 | scanner | 41% | DROP | 499 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 13:53 | evidence → |
| 45.115.26.25 | scanner | 40% | DROP | 389 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-17 03:14 | evidence → |
| 45.115.26.29 | scanner | 38% | DROP | 259 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-16 13:13 | evidence → |
| 45.115.26.40 | opportunistic_bruter | 34% | DROP | 15 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-16 21:50 | evidence → |
| 45.115.26.21 | scanner | 33% | DROP | 158 | 1 | ssh:bruteforcessh:connectionssh:intrusion | — | 2026-10-14 01:35 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds