IntrusionLabs IntrusionLabs
← Back to feed

45.153.34.212

TAGGED MALICIOUS how we decide →
Why: Our sensors observed interactive operator sessions · certainty: inferred
Threat Confidence
76%
Assessment
Hands-on intruder: runs interactive command sessions
  • Ran 410 commands on the host.
  • Part of a 274-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇳🇱 NL / Amsterdam
ASN
AS197170 · TechTies Inc.
Cloud Provider
—
Total Events
584
Top 10% by volume
Agent Count
3
First / Last Seen
2026-10-18 17:16 — 2026-10-19 06:16
Attack Types
telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
244 IPs 944988 events
2026-09-24 — ongoing · 244 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 464103 events
2026-09-24 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
106 IPs 523888 events
2026-09-20 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
110 IPs 473472 events
2026-04-20 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
27 IPs 6280 events
2026-04-04 — ongoing · 27 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 505500 events
2026-03-21 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
8 IPs 103383 events
2026-03-21 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
54 IPs 49417 events
2026-03-19 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
224 IPs 812091 events
2026-03-19 — ongoing · 224 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
132 IPs 129257 events
2026-03-19 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
274 IPs 1029231 events
2026-03-19 — ongoing · 274 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
205 IPs 865623 events
2026-03-09 — ongoing · 205 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
157 IPs 714676 events
2026-03-09 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
190 IPs 760651 events
2026-03-03 — ongoing · 190 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
256 IPs 868685 events
2026-03-02 — ongoing · 256 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 45.153.34.0/24 SUBNET Active high 🇳🇱 NL
5 IPs 933 events
ssh:bruteforcessh:connectionssh:malwaressh:proxy-abusetelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-03-01 — 2026-04-23 · 5 IPs from the same /24 subnet (45.153.34.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
scanner ×2 interactive_operator ×18
Sessions
20 (18 with login)
Avg Depth Score
0.83
Commands Executed
410
Files Downloaded
0
Notable Commands
  • CMD:
  • enable
  • enable
  • system
  • system
  • shell
  • shell
  • sh
  • >/tmp/.ptmx && cd /tmp/
  • >/var/.ptmx && cd /var/
  • echo SHELL_TEST
  • /bin/busybox TEST
  • cat /proc
  • ./
  • ./
Evidence Timeline
Interactive Operator 993498c67f68 greencloud_phx_01 · 2026-10-19 06:13
25 1 90%
Loading events...
Interactive Operator 04f39a9d5ef2 greencloud_phx_01 · 2026-10-19 05:57
25 1 90%
Loading events...
Interactive Operator cfb7668cfdcc w4m_singapore_01 · 2026-10-19 05:56
5 1 90%
Loading events...
Scanner 95a1f0e47c1f w4m_singapore_01 · 2026-10-19 05:56
15%
Loading events...
Interactive Operator 1b83f82aabd7 newark_01 · 2026-10-18 23:18
5 1 90%
Loading events...
Scanner 924c11e50425 newark_01 · 2026-10-18 23:18
15%
Loading events...
Interactive Operator 399d34e86f64 greencloud_phx_01 · 2026-10-18 22:34
25 1 90%
Loading events...
Interactive Operator 73572b1e8bca greencloud_phx_01 · 2026-10-18 22:15
25 1 90%
Loading events...
Interactive Operator 0b4da2512ad5 greencloud_phx_01 · 2026-10-18 21:57
25 1 90%
Loading events...
Interactive Operator 0f2f813eae25 greencloud_phx_01 · 2026-10-18 20:09
25 1 90%
Loading events...
Interactive Operator 35c764d75e25 greencloud_phx_01 · 2026-10-18 20:06
25 1 90%
Loading events...
Interactive Operator 52b5295223d1 greencloud_phx_01 · 2026-10-18 20:02
25 1 90%
Loading events...
Interactive Operator 39a31b1b4ef6 greencloud_phx_01 · 2026-10-18 19:34
25 1 90%
Loading events...
Interactive Operator 958cc0a530dd greencloud_phx_01 · 2026-10-18 19:06
25 1 90%
Loading events...
Interactive Operator a2926e463702 greencloud_phx_01 · 2026-10-18 18:57
25 1 90%
Loading events...
Interactive Operator 39b6881c121e greencloud_phx_01 · 2026-10-18 18:56
25 1 90%
Loading events...
Interactive Operator 606386c126f3 greencloud_phx_01 · 2026-10-18 18:38
25 1 90%
Loading events...
Interactive Operator 1061db284089 greencloud_phx_01 · 2026-10-18 17:27
25 1 90%
Loading events...
Interactive Operator 4900098f921d greencloud_phx_01 · 2026-10-18 17:19
25 1 90%
Loading events...
Interactive Operator 1ecaa9722d63 greencloud_phx_01 · 2026-10-18 17:16
25 1 90%
Loading events...