IntrusionLabs IntrusionLabs
← Back to feed

104.155.3.160

160.3.155.104.bc.googleusercontent.com (googleusercontent.com) ✓ FCrDNS
Threat Confidence
35%
Assessment
Port and service scanner
  • Logged in with 2 different credentials across 2 logins.
  • Ran 14 commands on the host.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇧🇪 BE / Brussels
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
40
Above average by volume
Agent Count
1
First / Last Seen
2026-09-28 02:22 — 2026-09-28 02:22
Attack Types
telnet:bruteforce telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×2 unknown ×1 interactive_operator ×1 opportunistic_bruter ×2
Sessions
6 (3 with login)
Avg Depth Score
0.38
Commands Executed
14
Files Downloaded
0
Notable Commands
  • From: <sip:nm@nm>;tag=root
  • To: <sip:nm2@nm2>
  • Call-ID: 50000
  • CSeq: 42 OPTIONS
  • Max-Forwards: 70
  • Content-Length: 0
Evidence Timeline
Interactive Operator 74a1bec4969e greencloud_phx_01 · 2026-09-28 02:22
14 1 90%
Loading events...
Scanner d26f20b9ec78 greencloud_phx_01 · 2026-09-28 02:22
15%
Loading events...
Scanner 042e74bd31cc greencloud_phx_01 · 2026-09-28 02:22
15%
Loading events...
Opportunistic Bruter a54eca2f08ac greencloud_phx_01 · 2026-09-28 02:22
1 50%
Loading events...
Unknown 8a4944264f4f greencloud_phx_01 · 2026-09-28 02:22
10%
Loading events...
Opportunistic Bruter 1f5da2bb76c1 greencloud_phx_01 · 2026-09-28 02:22
1 50%
Loading events...