IntrusionLabs IntrusionLabs
← Back to feed

184.82.29.252

184-82-29-0.24.public.cmbp-mser.myaisfibre.com (myaisfibre.com) ✗ FCrDNS
Threat Confidence
56%
Assessment
Port and service scanner
  • Downloaded 2 files and ran 28 commands on the host.
  • Part of a 242-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇹🇭 TH / Chiang Mai
ASN
AS133481 · AIS Fibre
Cloud Provider
—
Total Events
49
Above average by volume
Agent Count
2
First / Last Seen
2026-10-15 10:28 — 2026-10-17 04:41
Attack Types
telnet:connection telnet:intrusion telnet:malware
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Discovery
T1046
Command and Control
T1105
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
199 IPs 959117 events
2026-10-15 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
176 IPs 856705 events
2026-10-13 — ongoing · 176 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
216 IPs 1008886 events
2026-10-13 — ongoing · 216 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
206 IPs 988269 events
2026-10-01 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
199 IPs 1043750 events
2026-10-01 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
112 IPs 732381 events
2026-10-01 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
49 IPs 33685 events
2026-10-01 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
12 IPs 611 events
2026-09-29 — ongoing · 12 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
163 IPs 629146 events
2026-09-29 — ongoing · 163 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
219 IPs 813252 events
2026-09-28 — ongoing · 219 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
167 IPs 454440 events
2026-09-28 — ongoing · 167 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 72520 events
2026-09-28 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
174 IPs 673979 events
2026-09-25 — ongoing · 174 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
47 IPs 104603 events
2026-09-24 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
182 IPs 831609 events
2026-09-24 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
142 IPs 180731 events
2026-09-24 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
125 IPs 648924 events
2026-09-24 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
48 IPs 88302 events
2026-09-24 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
48 IPs 30689 events
2026-09-24 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
58 IPs 166240 events
2026-09-23 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 118267 events
2026-09-23 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
215 IPs 850557 events
2026-09-20 — ongoing · 215 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 154111 events
2026-09-18 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
189 IPs 807677 events
2026-09-14 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
189 IPs 958455 events
2026-09-14 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
242 IPs 1014136 events
2026-05-22 — ongoing · 242 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
203 IPs 775802 events
2026-05-17 — ongoing · 203 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
14 IPs 128262 events
2026-05-17 — ongoing · 14 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 172305 events
2026-05-17 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
165 IPs 785467 events
2026-03-03 — ongoing · 165 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
177 IPs 899385 events
2026-03-03 — ongoing · 177 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
209 IPs 1058035 events
2026-03-03 — ongoing · 209 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
170 IPs 860730 events
2026-03-03 — ongoing · 170 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 184249 events
2026-02-26 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×1 malware_dropper ×1 interactive_operator ×1
Sessions
3 (2 with login)
Avg Depth Score
0.68
Commands Executed
28
Files Downloaded
2
Notable Commands
  • sh
  • shell
  • shell
  • enable
  • enable
  • system
  • system
  • ping; sh
  • CMD:
  • /bin/busybox HISILICON
Download URLs
  • http://130.12.180.212/x86_64
Evidence Timeline
Scanner b8e5f51ab7ac w4m_seattle_01 · 2026-10-17 04:39
15%
Loading events...
Malware Dropper 8639c7511300 greencloud_phx_01 · 2026-10-15 10:29
17 2 1 100%
Loading events...
Interactive Operator 2c2351ee0bb5 greencloud_phx_01 · 2026-10-15 10:28
11 1 90%
Loading events...