IntrusionLabs IntrusionLabs
← Back to feed

94.208.174.41

94-208-174-41.cable.dynamic.v4.ziggo.nl (ziggo.nl) ✓ FCrDNS
Threat Confidence
57%
Assessment
Port and service scanner
  • Ran 105 commands on the host.
  • Part of a 244-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇳🇱 NL / Culemborg
ASN
AS33915 · Vodafone Libertel B.V.
Cloud Provider
—
Total Events
164
Above average by volume
Agent Count
2
First / Last Seen
2026-10-17 16:02 — 2026-10-18 02:57
Attack Types
telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
59 IPs 26464 events
2026-10-05 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 292306 events
2026-10-01 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
26 IPs 22879 events
2026-10-01 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
193 IPs 763077 events
2026-09-29 — ongoing · 193 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
179 IPs 737926 events
2026-09-29 — ongoing · 179 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
163 IPs 629146 events
2026-09-29 — ongoing · 163 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
151 IPs 594198 events
2026-09-28 — ongoing · 151 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
142 IPs 220466 events
2026-09-28 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
220 IPs 766244 events
2026-09-25 — ongoing · 220 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
182 IPs 656766 events
2026-09-25 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
244 IPs 944988 events
2026-09-24 — ongoing · 244 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
56 IPs 34024 events
2026-09-24 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
196 IPs 770260 events
2026-09-24 — ongoing · 196 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 39844 events
2026-09-24 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
241 IPs 899891 events
2026-09-16 — ongoing · 241 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
12 IPs 13495 events
2026-09-14 — ongoing · 12 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
215 IPs 871920 events
2026-09-08 — ongoing · 215 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 242734 events
2026-07-01 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
171 IPs 713147 events
2026-06-28 — ongoing · 171 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
180 IPs 383221 events
2026-06-09 — ongoing · 180 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
242 IPs 1014136 events
2026-05-22 — ongoing · 242 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
34 IPs 17566 events
2026-04-14 — ongoing · 34 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
32 IPs 115983 events
2026-04-04 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
165 IPs 618504 events
2026-03-21 — ongoing · 165 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
150 IPs 643211 events
2026-03-21 — ongoing · 150 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
224 IPs 812091 events
2026-03-19 — ongoing · 224 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 412743 events
2026-03-19 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
157 IPs 714676 events
2026-03-09 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
206 IPs 751766 events
2026-03-09 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
153 IPs 793654 events
2026-03-09 — ongoing · 153 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
229 IPs 811798 events
2026-03-09 — ongoing · 229 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
205 IPs 865623 events
2026-03-09 — ongoing · 205 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
176 IPs 511887 events
2026-03-04 — ongoing · 176 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
165 IPs 785467 events
2026-03-03 — ongoing · 165 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×10 interactive_operator ×6
Sessions
16 (6 with login)
Avg Depth Score
0.43
Commands Executed
105
Files Downloaded
0
Notable Commands
  • sh
  • shell
  • shell
  • enable
  • enable
  • system
  • system
  • ping; sh
  • CMD:
  • /bin/busybox HISILICON
Evidence Timeline
Interactive Operator 6233ba5cb231 greencloud_phx_01 · 2026-10-18 02:57
24 1 90%
Loading events...
Interactive Operator 1757c5965b55 greencloud_phx_01 · 2026-10-18 02:57
24 1 90%
Loading events...
Interactive Operator 8bc163fd8e16 greencloud_phx_01 · 2026-10-18 02:57
11 1 90%
Loading events...
Interactive Operator db24c15942f0 greencloud_phx_01 · 2026-10-18 02:57
11 1 90%
Loading events...
Interactive Operator c91675848807 greencloud_phx_01 · 2026-10-18 02:42
24 1 90%
Loading events...
Interactive Operator af10f40334ff greencloud_phx_01 · 2026-10-18 02:42
11 1 90%
Loading events...
Scanner 358742b7ab13 w4m_seattle_01 · 2026-10-17 18:02
15%
Loading events...
Scanner cdecd79d80b4 w4m_seattle_01 · 2026-10-17 18:02
15%
Loading events...
Scanner 6682f7842806 w4m_seattle_01 · 2026-10-17 18:02
15%
Loading events...
Scanner e9590ea30a47 w4m_seattle_01 · 2026-10-17 17:47
15%
Loading events...
Scanner c2c71bc17f6e w4m_seattle_01 · 2026-10-17 17:32
15%
Loading events...
Scanner f10bee35bdbb w4m_seattle_01 · 2026-10-17 17:02
15%
Loading events...
Scanner 5deafb29e0a8 w4m_seattle_01 · 2026-10-17 16:47
15%
Loading events...
Scanner 0ec75263f404 w4m_seattle_01 · 2026-10-17 16:32
15%
Loading events...
Scanner c2d002667ff4 w4m_seattle_01 · 2026-10-17 16:17
15%
Loading events...
Scanner fb87f513ee1d w4m_seattle_01 · 2026-10-17 16:02
15%
Loading events...