← Back to feed
Location
🇳🇱 NL / Eygelshoven
ASN
AS197170 · TechTies Inc.
Cloud Provider
—
Total Events
230
Above average by volume
Agent Count
2
First / Last Seen
2026-06-17 20:17 — 2026-06-21 09:31
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
External Corroboration
Blocklist.de
blocklist_de:reported
DShield Top Attackers
dshield:top_attacker
Campaigns
Subnet 91.92.40.0/24
SUBNET
Active
high
🇳🇱 NL
16 IPs
17041 events
ftp:bruteforcessh:bruteforce
2026-06-10 — ongoing · 16 IPs from the same /24 subnet (91.92.40.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
83519 events
2026-04-25 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
132 IPs
176080 events
2026-04-10 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
18 IPs
4200 events
2026-03-05 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
67813 events
2026-03-01 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
15 IPs
7399 events
2026-03-01 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
80337 events
2026-02-28 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
13504 events
2026-02-28 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
8 IPs
6769 events
2026-02-26 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
49 IPs
54437 events
2026-02-26 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
34 (18 with login)
Avg Depth Score
0.57
Commands Executed
90
Files Downloaded
0
Notable Commands
- export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
- uname -s -v -n -m 2 > /dev/null
- uname -m 2 > /dev/null
- cat /proc/uptime 2 > /dev/null | cut -d. -f1
- cut -d. -f1
Fingerprints
HASSH
SSH Client
Evidence Timeline
Interactive Operator
e3550f6ee2af
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
5d83c7b4b7ab
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
c059fc327abd
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
2cea06e13361
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
f62c52cd23c1
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
bc77b87f4760
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
56b327e28d65
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
a4e5f3c3d3e5
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
f95d8aced8a2
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
9baa32943555
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
48031d8b8499
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
1c394da4bda6
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
5a14468f0db3
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
902db54542bb
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
5da31148053c
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
01a966622120
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
8b48c46102ef
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Interactive Operator
f09239866628
LOGIN
5
1
90%
Loading events...
HASSH 2ec37a7cc8daf20…
SSH-2.0-Go
$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b…$ uname -s -v -n -m 2 > /dev/null$ uname -m 2 > /dev/null$ cat /proc/uptime 2 > /dev/null | cut -d. -f1$ cut -d. -f1
Scanner
4d4158639a4f
15%
Loading events...
Scanner
c73100c6d41e
15%
Loading events...
Scanner
f64d95f167a3
15%
Loading events...