IntrusionLabs IntrusionLabs
← Back to feed

45.184.178.241

Threat Confidence
57%
Assessment
Port and service scanner
  • Ran 37 commands on the host.
  • Part of a 369-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇧🇷 BR / Lagoa do Ouro
ASN
AS269392 · J FELIX JUNIOR - ME
Cloud Provider
—
Total Events
65
Above average by volume
Agent Count
2
First / Last Seen
2026-10-23 00:22 — 2026-10-23 22:31
Attack Types
telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Discovery
T1018 T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
234 IPs 887142 events
2026-10-19 — ongoing · 234 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
206 IPs 526634 events
2026-10-01 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
314 IPs 1196394 events
2026-09-24 — ongoing · 314 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
340 IPs 1196634 events
2026-09-24 — ongoing · 340 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
7 IPs 473 events
2026-09-18 — ongoing · 7 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
286 IPs 1092538 events
2026-08-21 — ongoing · 286 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
369 IPs 1366855 events
2026-08-21 — ongoing · 369 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
263 IPs 890943 events
2026-07-05 — ongoing · 263 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
330 IPs 1210957 events
2026-03-12 — ongoing · 330 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×1 interactive_operator ×1
Sessions
2 (1 with login)
Avg Depth Score
0.53
Commands Executed
37
Files Downloaded
0
Notable Commands
  • enable
  • enable
  • system
  • system
  • shell
  • shell
  • sh
  • linuxshell
  • linuxshell
  • ping ;sh
Evidence Timeline
Scanner 4831ee9ae7b7 newark_01 · 2026-10-23 22:31
15%
Loading events...
Interactive Operator c16b1a9987c8 greencloud_phx_01 · 2026-10-23 00:22
37 1 90%
Loading events...