IntrusionLabs IntrusionLabs
← Back to feed

213.3.25.198

198.25.3.213.static.wline.lns.sme.cust.swisscom.ch (swisscom.ch) ✓ FCrDNS
Threat Confidence
44%
Assessment
Port and service scanner
  • Part of a 387-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇭 CH / Baldegg
ASN
AS3303 · Bluewin
Cloud Provider
—
Total Events
16
Average by volume
Agent Count
2
First / Last Seen
2026-10-20 23:01 — 2026-10-25 17:07
Attack Types
ssh:connection telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
88 IPs 78433 events
2026-09-01 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
387 IPs 1095898 events
2026-07-28 — ongoing · 387 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
196 IPs 636214 events
2026-05-13 — ongoing · 196 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
10 IPs 8224 events
2026-04-29 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
273 IPs 906011 events
2026-03-11 — ongoing · 273 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
362 IPs 1142489 events
2026-03-05 — ongoing · 362 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
108 IPs 92968 events
2026-03-05 — ongoing · 108 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
276 IPs 815882 events
2026-03-01 — ongoing · 276 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
363 IPs 1131316 events
2026-03-01 — ongoing · 363 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
382 IPs 1182903 events
2026-03-01 — ongoing · 382 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
360 IPs 1081385 events
2026-03-01 — ongoing · 360 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
255 IPs 970189 events
2026-03-01 — ongoing · 255 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
266 IPs 641914 events
2026-02-26 — ongoing · 266 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×8
Sessions
8
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner a52500ea9d96 w4m_seattle_01 · 2026-10-25 17:07
15%
Loading events...
Scanner 12373bd65c23 w4m_seattle_01 · 2026-10-25 17:07
15%
Loading events...
Scanner f73f9380936d w4m_seattle_01 · 2026-10-25 17:02
15%
Loading events...
Scanner bbd473acb2e8 w4m_seattle_01 · 2026-10-25 17:02
15%
Loading events...
Scanner 2bea84a4bc29 greencloud_phx_01 · 2026-10-20 23:02
15%
Loading events...
Scanner f15c6b5350f1 greencloud_phx_01 · 2026-10-20 23:02
15%
Loading events...
Scanner fb2d9513502f greencloud_phx_01 · 2026-10-20 23:01
15%
Loading events...
Scanner 826670864102 greencloud_phx_01 · 2026-10-20 23:01
15%
Loading events...