attack_type:brute_force × latest_source_host:greynoise.io × limpar

Resultados

2 casos · pág. 1/1

greynoise.io · há 1d medium

ColocaTel AS213438 fleet of 21 Netherlands IPs drives 67% of global RDP scanning in a second burst-and-crash cycle

GreyNoise reports that 21 IP addresses in AS213438 (registered to ColocaTel Inc., Mahe, Seychelles) produced 1,856,167 of 2,753,274 global RDP Crawler sessions on April 7, 2026, or 67.4% of the worldwide total. Over April 5-7 the same fleet accounted for 49.7% of global RDP Crawler activity. All 21 IPs are geolocated to the Netherlands, w…

greynoise.io · há 1d low

GreyNoise: 11 major IP blocklists covered only ~2% of 119,842 malicious edge-scanning IPs seen on 14 May 2026

GreyNoise reports that on 14 May 2026 its Global Observation Grid recorded 119,842 malicious, non-spoofable IPs targeting edge infrastructure. Compared against eleven widely used OSINT and commercial feeds, average coverage was 2.0%, and no single feed exceeded 5%. Even the largest list (Avastel, about 500,000 IPs) caught under 2%, and ve…