IntrusionLabs IntrusionLabs
← Back to feed

71.9.208.228

syn-071-009-208-228.res.spectrum.com (spectrum.com) ✗ FCrDNS
Threat Confidence
39%
Assessment
Port and service scanner
  • Part of a 226-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Louisville
ASN
AS20115 · Charter Communications LLC
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
2
First / Last Seen
2026-10-19 22:49 — 2026-10-22 10:14
Attack Types
telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Discovery
T1046
External Corroboration
CINS Army
Reported 2026-10-22 12:02
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
223 IPs 657107 events
2026-09-24 — ongoing · 223 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
192 IPs 533474 events
2026-09-20 — ongoing · 192 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
210 IPs 511150 events
2026-09-14 — ongoing · 210 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS20115 Charter Communications LLC ASN Active medium 🇺🇸 US
9 IPs 3108 events
http:scanssh:bruteforcessh:connectionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-08-17 — ongoing · 9 IPs from the same network (Charter Communications LLC, AS20115) were active during overlapping time periods. Temporal correlation …
Multi-Agent Scan SCAN Active medium
203 IPs 492723 events
2026-05-29 — ongoing · 203 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
160 IPs 563679 events
2026-03-01 — ongoing · 160 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
226 IPs 697982 events
2026-03-01 — ongoing · 226 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×2
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner 93fc7c8581f0 w4m_singapore_01 · 2026-10-22 10:14
15%
Loading events...
Scanner f9621604e7f5 w4m_seattle_01 · 2026-10-19 22:49
15%
Loading events...