← Back to feed

121.148.158.134

Threat Confidence
57%
Assessment
Port and service scanner
  • Ran 280 commands on the host.
  • Active for 16 days, 2026-10-02 to 2026-10-19.
  • Part of a 202-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇰🇷 KR / Nam-gu
ASN
AS4766 · Korea Telecom
Cloud Provider
—
Total Events
420
Top 10% by volume
Agent Count
2
First / Last Seen
2026-10-02 16:40 — 2026-10-19 12:34
Attack Types
telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Discovery
External Corroboration
Not flagged by any external feeds
Session Forensics
scanner ×18 interactive_operator ×16
Sessions
34 (16 with login)
Avg Depth Score
0.5
Commands Executed
280
Files Downloaded
0
Notable Commands
  • sh
  • shell
  • shell
  • enable
  • enable
  • system
  • system
  • ping; sh
  • CMD:
  • /bin/busybox HISILICON
Evidence Timeline
Scanner b1e538728dbe w4m_seattle_01 · 2026-10-19 12:34
15%
Loading events...
Scanner a1c6af25d278 w4m_seattle_01 · 2026-10-19 12:19
15%
Loading events...
Scanner 0ea4232c81c5 w4m_seattle_01 · 2026-10-19 12:04
15%
Loading events...
Scanner f56b61538c36 w4m_seattle_01 · 2026-10-19 11:49
15%
Loading events...
Scanner 98d6ff60f56e w4m_seattle_01 · 2026-10-19 11:34
15%
Loading events...
Scanner 5ec7691f7574 w4m_seattle_01 · 2026-10-19 11:19
15%
Loading events...
Scanner be148305e3d9 w4m_seattle_01 · 2026-10-19 11:04
15%
Loading events...
Scanner 534b6575f49d w4m_seattle_01 · 2026-10-19 10:49
15%
Loading events...
Scanner 08fd1cfadc0e w4m_seattle_01 · 2026-10-19 10:34
15%
Loading events...
Scanner 2ef297bea70e w4m_seattle_01 · 2026-10-19 10:19
15%
Loading events...
Scanner 84da8d18bdd3 w4m_seattle_01 · 2026-10-19 10:04
15%
Loading events...
Scanner 5ccbe0e3d3e0 w4m_seattle_01 · 2026-10-19 09:49
15%
Loading events...
Scanner 4f9d1c4e73c7 w4m_seattle_01 · 2026-10-19 09:34
15%
Loading events...
Scanner d7c7e4e85b59 w4m_seattle_01 · 2026-10-19 09:19
15%
Loading events...
Scanner 8261f8fdc107 w4m_seattle_01 · 2026-10-19 09:04
15%
Loading events...
Scanner beba5ec9c1c5 w4m_seattle_01 · 2026-10-19 08:49
15%
Loading events...
Scanner b31d2d7e71e6 w4m_seattle_01 · 2026-10-19 08:34
15%
Loading events...
Scanner 3e636e51f47e w4m_seattle_01 · 2026-10-19 08:20
15%
Loading events...
Interactive Operator 0a10fcecbf60 greencloud_phx_01 · 2026-10-02 18:25
24 1 90%
Loading events...
Interactive Operator 751a80b75781 greencloud_phx_01 · 2026-10-02 18:25
11 1 90%
Loading events...
Interactive Operator dab574ed08d3 greencloud_phx_01 · 2026-10-02 18:10
24 1 90%
Loading events...
Interactive Operator c4fb83193d6b greencloud_phx_01 · 2026-10-02 18:10
11 1 90%
Loading events...
Interactive Operator 558bd60d1675 greencloud_phx_01 · 2026-10-02 17:55
24 1 90%
Loading events...
Interactive Operator 4e539cd23029 greencloud_phx_01 · 2026-10-02 17:55
11 1 90%
Loading events...
Interactive Operator 555e2533419b greencloud_phx_01 · 2026-10-02 17:40
24 1 90%
Loading events...
Interactive Operator a7fc17b2ecce greencloud_phx_01 · 2026-10-02 17:40
11 1 90%
Loading events...
Interactive Operator 84bf6fea2628 greencloud_phx_01 · 2026-10-02 17:25
24 1 90%
Loading events...
Interactive Operator 64b3d74ed3be greencloud_phx_01 · 2026-10-02 17:25
11 1 90%
Loading events...
Interactive Operator 931c27547840 greencloud_phx_01 · 2026-10-02 17:10
24 1 90%
Loading events...
Interactive Operator 92b7a9f4ce97 greencloud_phx_01 · 2026-10-02 17:10
11 1 90%
Loading events...
Interactive Operator bc6c44164c98 greencloud_phx_01 · 2026-10-02 16:55
24 1 90%
Loading events...
Interactive Operator 4661c8009a81 greencloud_phx_01 · 2026-10-02 16:55
11 1 90%
Loading events...
Interactive Operator 9926ff3666ff greencloud_phx_01 · 2026-10-02 16:40
24 1 90%
Loading events...
Interactive Operator b8f2846a1013 greencloud_phx_01 · 2026-10-02 16:40
11 1 90%
Loading events...