IntrusionLabs IntrusionLabs
← Back to feed

164.90.189.117

Threat Confidence
51%
Assessment
Port and service scanner
  • Part of a 232-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
13
Average by volume
Agent Count
2
First / Last Seen
2026-10-19 10:51 — 2026-10-20 09:42
Attack Types
http:scan telnet:bruteforce telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Blocklist.de
Reported 2026-10-20 11:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
75 IPs 88631 events
2026-10-17 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 6722 events
2026-10-11 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
123 IPs 618299 events
2026-09-20 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 305373 events
2026-09-20 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
199 IPs 808643 events
2026-07-24 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
212 IPs 748902 events
2026-06-26 — ongoing · 212 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
173 IPs 856455 events
2026-05-16 — ongoing · 173 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
43 IPs 85537 events
2026-04-24 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
98 IPs 113836 events
2026-04-21 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 555122 events
2026-04-21 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
231 IPs 851235 events
2026-03-02 — ongoing · 231 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
110 IPs 265142 events
2026-02-27 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
211 IPs 891822 events
2026-02-26 — ongoing · 211 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
232 IPs 873983 events
2026-02-26 — ongoing · 232 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
183 IPs 724055 events
2026-02-26 — ongoing · 183 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
203 IPs 712375 events
2026-02-26 — ongoing · 203 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×3 web_probe ×2 credential_probe ×1
Sessions
6
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner 474651a79d08 w4m_singapore_01 · 2026-10-20 09:42
15%
Loading events...
Credential Probe 905dc74268a2 w4m_singapore_01 · 2026-10-20 09:42
3 25%
Loading events...
Web Probe d458fe0ee492a216 w4m_singapore_01 · 2026-10-20 02:08
25%
Loading events...
Web Probe 4520f1b1697362d6 w4m_seattle_01 · 2026-10-19 12:23
25%
Loading events...
Scanner a7d146f4b7f7 w4m_seattle_01 · 2026-10-19 10:51
15%
Loading events...
Scanner 05d2a43a77ea w4m_seattle_01 · 2026-10-19 10:51
15%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-20 02:08:30 :80 http HTTP GET request opencanary sin
2026-10-19 12:23:17 :80 http HTTP GET request opencanary sea