← Back to feed

37.52.142.142

142-142-52-37.pool.ukrtel.net (ukrtel.net) ✗ FCrDNS
Threat Confidence
34%
Assessment
Port and service scanner
  • Part of a 359-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇦 UA / Kharkiv
ASN
AS6849 · JSC Ukrtelecom
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
2
First / Last Seen
2026-10-23 20:12 — 2026-10-24 09:57
Attack Types
telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
2 IPs 32 events
2026-09-24 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS6849 JSC Ukrtelecom ASN Active medium 🇺🇦 UA
14 IPs 66 events
ssh:connectiontelnet:connectiontelnet:intrusion
2026-08-17 — ongoing · 14 IPs from the same network (JSC Ukrtelecom, AS6849) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan SCAN Active medium
253 IPs 1000421 events
2026-05-16 — ongoing · 253 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
296 IPs 1110179 events
2026-04-13 — ongoing · 296 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
359 IPs 1039373 events
2026-03-16 — ongoing · 359 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
250 IPs 467283 events
2026-03-04 — ongoing · 250 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
277 IPs 934822 events
2026-03-01 — ongoing · 277 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
310 IPs 952954 events
2026-02-28 — ongoing · 310 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
scanner ×2
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner 7502adde42bc w4m_singapore_01 · 2026-10-24 09:57
15%
Loading events...
Scanner f670046d2fa5 newark_01 · 2026-10-23 20:12
15%
Loading events...