IntrusionLabs IntrusionLabs
← Back to feed

160.191.244.52

Threat Confidence
35%
Assessment
Port and service scanner
  • Part of a 256-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇻🇳 VN
ASN
AS153416 · Hoang Dieu Cloud Computing Company Limited
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
2
First / Last Seen
2026-10-19 16:22 — 2026-10-19 16:25
Attack Types
ssh:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
233 IPs 1021854 events
2026-10-18 — ongoing · 233 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
8 IPs 1822 events
2026-10-10 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
140 IPs 364181 events
2026-09-26 — ongoing · 140 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
151 IPs 545499 events
2026-09-20 — ongoing · 151 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
235 IPs 985112 events
2026-09-11 — ongoing · 235 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
256 IPs 1068476 events
2026-08-03 — ongoing · 256 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
94 IPs 95242 events
2026-06-10 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
194 IPs 775041 events
2026-02-26 — ongoing · 194 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×2
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 0 HASSH fingerprints
SSH Client
+&\xe0Cookie: mstshash=hello
Evidence Timeline
Scanner 10cbfacb13fe newark_01 · 2026-10-19 16:25
15%
Loading events...
Scanner 93e05359efa1 w4m_seattle_01 · 2026-10-19 16:22
15%
Loading events...