IntrusionLabs IntrusionLabs
← Back to feed

80.94.95.223

Threat Confidence
35%
Assessment
Port and service scanner
  • Part of a 199-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇷🇴 RO
ASN
AS204428 · SS-Net
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
2
First / Last Seen
2026-10-20 16:48 — 2026-10-20 17:10
Attack Types
ssh:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
193 IPs 640969 events
2026-03-24 — ongoing · 193 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
188 IPs 689504 events
2026-03-02 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 524566 events
2026-02-27 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
171 IPs 581615 events
2026-02-26 — ongoing · 171 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
9 IPs 7021 events
2026-02-26 — ongoing · 9 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
199 IPs 668752 events
2026-02-26 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 80.94.95.0/24 SUBNET Active high 🇷🇴 RO
3 IPs 742 events
http:scanssh:connectionssh:intrusion
2026-02-22 — 2026-07-29 · 3 IPs from the same /24 subnet (80.94.95.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
scanner ×2
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
2 SSH client banners · 0 HASSH fingerprints
SSH Client
/*\xe0Cookie: mstshash=Administr\x03\x00\x00/*\xe0\x00\x00\x00\x00\x00Cookie: mstshash=Administr
Evidence Timeline
Scanner ea658477fc6e newark_01 · 2026-10-20 17:10
15%
Loading events...
Scanner 65399e35e5f9 greencloud_phx_01 · 2026-10-20 16:48
15%
Loading events...