← Back to feed
Subnet 38.110.46.0/24
SUBNET Active highWhy this campaign was detected
4 IPs from the same /24 subnet (38.110.46.0/24) were observed attacking our sensors within the same time window. All belong to Georgia Institute of Technology (AS2637). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS2637 · Georgia Institute of Technology
Subnet
38.110.46.0/24
Country
🇺🇸 US
Cloud Provider
—
Member Count
4 IPs
Below average
Total Events
45
Below average by volume
Started / Ended
2026-10-21 13:05 — ongoing
Attack Types
MITRE ATT&CK Techniques
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 38.110.46.252 | scanner | 63% | 34 | 3 | http:scanssh:connection | scanner10.cc.gatech.edu | 2026-10-22 13:34 | evidence → | |
| 38.110.46.238 | scanner | 45% | 5 | 2 | http:scanssh:connection | researchscan238.cc.gatech.edu | 2026-10-22 14:53 | evidence → | |
| 38.110.46.235 | scanner | 45% | 5 | 2 | http:scanssh:connection | researchscan235.cc.gatech.edu | 2026-10-22 12:30 | evidence → | |
| 38.110.46.237 | web_probe | 24% | 1 | 1 | http:scan | researchscan237.cc.gatech.edu | 2026-10-21 13:05 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds