IntrusionLabs IntrusionLabs
← Back to feed

93.161.42.190

TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed opportunistic bruter sessions · certainty: inferred
93-161-42-190-static.dk.customer.tdc.net (tdc.net) ✓ FCrDNS
Threat Confidence
77%
Assessment
Gains access by password guessing, then takes no action
  • Logged in with 270 different credentials across 365 logins.
  • Ran 4,373 commands on the host.
  • Active for 34 days, 2026-09-16 to 2026-10-21.
  • Part of a 231-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇰 DK / Hvidovre
ASN
AS3292 · TDC Holding A/S
Cloud Provider
—
Total Events
6674
Top 1% by volume
Agent Count
3
First / Last Seen
2026-09-16 22:12 — 2026-10-21 20:21
Attack Types
telnet:bruteforce telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
108 IPs 489267 events
2026-09-12 — ongoing · 108 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
122 IPs 606471 events
2026-09-04 — ongoing · 122 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
208 IPs 722527 events
2026-04-10 — ongoing · 208 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
24 IPs 22319 events
2026-04-10 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
45 IPs 71330 events
2026-04-10 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
170 IPs 591917 events
2026-04-10 — ongoing · 170 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
156 IPs 279878 events
2026-03-21 — ongoing · 156 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
151 IPs 653041 events
2026-03-14 — ongoing · 151 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
231 IPs 819343 events
2026-03-04 — ongoing · 231 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 4848 events
2026-02-26 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×6 unknown ×1 interactive_operator ×6 opportunistic_bruter ×359
Sessions
372 (365 with login)
Avg Depth Score
0.5
Commands Executed
4373
Files Downloaded
0
Notable Commands
  • webadmin
  • webadmin
  • admin
  • admin
  • CMD:
  • ADMIN
  • root
  • root
  • 12345
  • 12345
  • support
  • support
  • telecomadmin
  • telecomadmin
  • 1
  • 1
  • useradmin
  • useradmin
  • CRAFTSPERSON
  • CRAFTSPERSON
Evidence Timeline
Opportunistic Bruter 29b27e3ae231 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 4bcfdabc04c6 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter f191c7f2e9e1 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter d2a9c534e069 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter ca974428dcbb greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 87a8dc90f1e6 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter a2ef4f1b5947 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 5b246a7d6c0e greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 7ac41c2ca30d greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter b20cc73b6613 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 50a181cd78ac greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter ecbb19390d4a greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 0004cf79aced greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter f30da4e3b9df greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 1f184c9df786 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter b3271f6a5153 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 2586f92fe460 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter a9b7330e89f9 greencloud_phx_01 · 2026-10-21 20:21
1 50%
Loading events...
Opportunistic Bruter 3ec1fb545819 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter e2aae96f8dbb greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 55572f37f85a greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 9e10c85f0969 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 009c07961747 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 0ea2c546f10a greencloud_phx_01 · 2026-10-21 20:20
2 50%
Loading events...
Opportunistic Bruter 81d07edb2aa5 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 4bac808c0ef8 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter ca03f1e721fd greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter f12c6a4d4b1b greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 715ba5e6335d greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter b1c3e86e5706 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 476a46e381bc greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 6bb0540dd112 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter ab976b141dd7 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 1d3d2696ca04 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter e80c37557750 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 17aca2d69a4f greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter b47a7b85ddee greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 4956135cfe5b greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 9ea640297904 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter fcb2d9d0ca41 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 587e41f0a135 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter ccaaa4c3daf7 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Scanner 960cabfeb1d8 greencloud_phx_01 · 2026-10-21 20:20
15%
Loading events...
Opportunistic Bruter 1f2b42ae8aef greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 1a3795b96080 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 23fc800871f1 greencloud_phx_01 · 2026-10-21 20:20
1 50%
Loading events...
Opportunistic Bruter 1283220c697a greencloud_phx_01 · 2026-10-21 20:19
1 50%
Loading events...
Interactive Operator 48bc1d29dcf3 greencloud_phx_01 · 2026-10-21 20:16
732 1 90%
Loading events...
Opportunistic Bruter beeaf2947eb2 greencloud_phx_01 · 2026-10-21 20:16
1 50%
Loading events...
Opportunistic Bruter 150031e2665f greencloud_phx_01 · 2026-10-21 20:16
1 50%
Loading events...