← Back to feed

Subnet 103.82.122.0/24

SUBNET Ended high
Why this campaign was detected
3 IPs from the same /24 subnet (103.82.122.0/24) were observed attacking our sensors within the same time window. All belong to FIBERISH (PVT) LTD (AS141342). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS141342 · FIBERISH (PVT) LTD
Subnet
103.82.122.0/24
Country
🇵🇰 PK
Cloud Provider
—
Member Count
3 IPs
Below average
Total Events
44
Below average by volume
Started / Ended
2026-10-07 16:33 — ongoing
Attack Types
telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
103.82.122.27 scanner 24% 28 2 telnet:connection — 2026-10-09 10:39 evidence →
103.82.122.33 scanner 14% 12 1 telnet:connection — 2026-10-07 16:34 evidence →
103.82.122.26 scanner 12% 4 1 telnet:connection — 2026-10-10 21:44 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds