IntrusionLabs IntrusionLabs
← Back to feed

166.62.42.127

TAGGED MALICIOUS how we decide →
Why: Our sensors observed interactive operator sessions · certainty: inferred
127.42.62.166.host.secureserver.net (secureserver.net) ✓ FCrDNS
Threat Confidence
48%
Assessment
Hands-on intruder: runs interactive command sessions
  • Logged in with 20 different credentials across 30 logins.
  • Ran 266 commands on the host.
  • Part of a 283-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US
ASN
AS398101 · GoDaddy.com, LLC
Cloud Provider
—
Total Events
449
Top 10% by volume
Agent Count
2
First / Last Seen
2026-09-28 00:46 — 2026-09-28 10:15
Attack Types
telnet:bruteforce telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
17 IPs 22201 events
2026-09-26 — ongoing · 17 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 164689 events
2026-09-26 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
257 IPs 612487 events
2026-09-24 — ongoing · 257 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
237 IPs 539996 events
2026-09-24 — ongoing · 237 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
211 IPs 311701 events
2026-09-22 — ongoing · 211 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
206 IPs 478447 events
2026-09-22 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
283 IPs 597549 events
2026-09-22 — ongoing · 283 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
130 IPs 349914 events
2026-09-22 — ongoing · 130 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
221 IPs 517346 events
2026-09-09 — ongoing · 221 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
188 IPs 549702 events
2026-05-13 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Ended medium
3 IPs 1205 events
2026-03-31 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 46574 events
2026-03-31 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
214 IPs 435545 events
2026-03-07 — ongoing · 214 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
141 IPs 137287 events
2026-03-07 — ongoing · 141 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
32 IPs 24794 events
2026-03-04 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
274 IPs 501286 events
2026-03-01 — ongoing · 274 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
266 IPs 509435 events
2026-03-01 — ongoing · 266 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
197 IPs 400233 events
2026-02-27 — ongoing · 197 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
250 IPs 529731 events
2026-02-26 — ongoing · 250 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
216 IPs 532502 events
2026-02-26 — ongoing · 216 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×1 interactive_operator ×30
Sessions
31 (30 with login)
Avg Depth Score
0.88
Commands Executed
266
Files Downloaded
0
Notable Commands
  • enable
  • enable
  • linuxshell
  • linuxshell
  • system
  • system
  • shell
  • shell
  • sh
Evidence Timeline
Interactive Operator cf0e91a9e678 greencloud_phx_01 · 2026-09-28 10:11
9 1 90%
Loading events...
Interactive Operator 62d20c06b3ea greencloud_phx_01 · 2026-09-28 10:11
9 1 90%
Loading events...
Interactive Operator a301c3dfda00 greencloud_phx_01 · 2026-09-28 10:10
9 1 90%
Loading events...
Interactive Operator d213a19ccfb2 greencloud_phx_01 · 2026-09-28 10:10
9 1 90%
Loading events...
Interactive Operator 41167ca35908 greencloud_phx_01 · 2026-09-28 10:12
5 2 90%
Loading events...
Interactive Operator ef8ef8cb4b64 greencloud_phx_01 · 2026-09-28 10:09
9 1 90%
Loading events...
Interactive Operator ce79ee4bba20 greencloud_phx_01 · 2026-09-28 10:08
9 1 90%
Loading events...
Interactive Operator 139d13b92cf2 greencloud_phx_01 · 2026-09-28 10:08
9 1 90%
Loading events...
Interactive Operator a5dadb8ef5d4 greencloud_phx_01 · 2026-09-28 10:07
9 1 90%
Loading events...
Interactive Operator 22f44f14f93b greencloud_phx_01 · 2026-09-28 10:07
9 1 90%
Loading events...
Interactive Operator c2c6a2aa2c08 greencloud_phx_01 · 2026-09-28 10:05
9 1 90%
Loading events...
Interactive Operator 0d46ba4b78a0 greencloud_phx_01 · 2026-09-28 10:05
9 1 90%
Loading events...
Interactive Operator 177d51bc396f greencloud_phx_01 · 2026-09-28 10:04
9 1 90%
Loading events...
Interactive Operator 7766e371d472 greencloud_phx_01 · 2026-09-28 10:03
9 1 90%
Loading events...
Interactive Operator 9e5ef8670a5e greencloud_phx_01 · 2026-09-28 10:06
9 1 90%
Loading events...
Interactive Operator 0575f9da5247 greencloud_phx_01 · 2026-09-28 10:02
9 1 90%
Loading events...
Interactive Operator f65210b5cb2a greencloud_phx_01 · 2026-09-28 10:02
9 1 90%
Loading events...
Interactive Operator 7d1a88691e5c greencloud_phx_01 · 2026-09-28 10:00
9 1 90%
Loading events...
Interactive Operator a370e5badddc greencloud_phx_01 · 2026-09-28 10:03
9 1 90%
Loading events...
Interactive Operator 0397123a9410 greencloud_phx_01 · 2026-09-28 10:00
9 1 90%
Loading events...
Interactive Operator a0de5de469d7 greencloud_phx_01 · 2026-09-28 09:59
9 1 90%
Loading events...
Interactive Operator 82efa8e11410 greencloud_phx_01 · 2026-09-28 09:59
9 1 90%
Loading events...
Interactive Operator c2cf60616125 greencloud_phx_01 · 2026-09-28 10:01
9 1 90%
Loading events...
Interactive Operator 596f3ae29457 greencloud_phx_01 · 2026-09-28 09:58
9 1 90%
Loading events...
Interactive Operator c951435bfa4c greencloud_phx_01 · 2026-09-28 09:57
9 1 90%
Loading events...
Interactive Operator 0a54fe9c80e6 greencloud_phx_01 · 2026-09-28 09:57
9 1 90%
Loading events...
Interactive Operator 2dd0479f60a7 greencloud_phx_01 · 2026-09-28 09:55
9 1 90%
Loading events...
Interactive Operator 047366399bae greencloud_phx_01 · 2026-09-28 09:54
9 1 90%
Loading events...
Interactive Operator 8502d46929cd greencloud_phx_01 · 2026-09-28 09:56
9 1 90%
Loading events...
Interactive Operator a7f288f92782 greencloud_phx_01 · 2026-09-28 09:56
9 1 90%
Loading events...
Scanner 8c8c7f5f6c11 w4m_seattle_01 · 2026-09-28 00:46
15%
Loading events...