← Back to feed
88.254.168.248
88.254.168.248.dynamic.ttnet.com.tr
(ttnet.com.tr)
✗ FCrDNS
Assessment
Port and service scanner
- Part of a 132-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇹🇷 TR / Istanbul
ASN
AS9121 · Turk Telekom
Cloud Provider
—
Total Events
12
Average by volume
Agent Count
2
First / Last Seen
2026-10-16 11:09 — 2026-10-22 00:34
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
43 IPs
41053 events
2026-09-25 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
13 IPs
119278 events
2026-09-22 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
123 IPs
633354 events
2026-06-03 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
132 IPs
526545 events
2026-04-10 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS9121 Turk Telekom
ASN
Active
medium
🇹🇷 TR
10 IPs
50 events
ssh:connectiontelnet:connection
2026-02-26 — 2026-04-19 · 10 IPs from the same network (Turk Telekom, AS9121) were active during overlapping time periods. Temporal correlation across …
Session Forensics
Sessions
6
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner
ec78c7869a5b
15%
Loading events...
Scanner
25e5202ed591
15%
Loading events...
Scanner
f89344645699
15%
Loading events...
Scanner
ac16b48a2325
15%
Loading events...
Scanner
ad7a11ac2102
15%
Loading events...
Scanner
8cc6e022c925
15%
Loading events...