← Back to feed
122.3.6.113
122.3.6.113.pldt.net
(pldt.net)
✗ FCrDNS
Assessment
Port and service scanner
- Ran 105 commands on the host.
- Active for 13 days, 2026-10-13 to 2026-10-27.
- Part of a 362-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇵🇭 PH / Quezon City
ASN
AS9299 · Philippine Long Distance Telephone Company
Cloud Provider
—
Total Events
158
Above average by volume
Agent Count
4
First / Last Seen
2026-10-13 08:27 — 2026-10-27 00:37
Attack Types
MITRE ATT&CK Techniques
External Corroboration
DShield Top Attackers
dshield:top_attacker
Campaigns
Multi-Agent Scan
SCAN
Active
medium
213 IPs
842941 events
2026-10-07 — ongoing · 213 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
3 IPs
1593 events
2026-07-23 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
362 IPs
1152661 events
2026-05-24 — ongoing · 362 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
304 IPs
1044054 events
2026-05-24 — ongoing · 304 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
120 IPs
82299 events
2026-05-24 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
2 IPs
2508 events
2026-05-24 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
322 IPs
1123492 events
2026-03-21 — ongoing · 322 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
208 IPs
319941 events
2026-03-15 — ongoing · 208 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS9299 Philippine Long Distance Telephone Company
ASN
Active
medium
🇵🇭 PH
8 IPs
7240 events
ssh:bruteforcessh:connectionssh:malwaretelnet:connectiontelnet:credential-reusetelnet:intrusion
2026-03-07 — ongoing · 8 IPs from the same network (Philippine Long Distance Telephone Company, AS9299) were active during overlapping time periods. …
Session Forensics
Sessions
13 (6 with login)
Avg Depth Score
0.5
Commands Executed
105
Files Downloaded
0
Notable Commands
- sh
- shell
- shell
- enable
- enable
- system
- system
- ping; sh
- CMD:
- /bin/busybox HISILICON
Evidence Timeline
Interactive Operator
d1f228c95d3a
LOGIN
24
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Interactive Operator
029ecad465cc
LOGIN
11
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Interactive Operator
2a39f3f6ba87
LOGIN
24
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Interactive Operator
34843251eb99
LOGIN
11
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Interactive Operator
4b82420f6d8b
LOGIN
24
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Interactive Operator
59a74bcccbdb
LOGIN
11
1
90%
Loading events...
$ sh$ shell$ shell $ enable$ enable
Scanner
db6a2ea9f262
15%
Loading events...
Scanner
f12e654abe7d
15%
Loading events...
Scanner
7e64b9c5d210
15%
Loading events...
Scanner
48c28276d932
15%
Loading events...
Scanner
655c0771afca
15%
Loading events...
Scanner
f38c938379ef
15%
Loading events...
Scanner
5740d9cdf05f
15%
Loading events...