← Back to feed

107.150.117.219

Threat Confidence
39%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Cloud Provider
—
Total Events
13
Below average by volume
Agent Count
1
First / Last Seen
2026-03-05 10:09 — 2026-03-25 08:05
Attack Types
ftp:bruteforce ssh:bruteforce
External Corroboration
DShield Top Attackers
Reported 2026-03-27 20:13
dshield:top_attacker
CINS Army
Reported 2026-03-27 20:08
cins:bad_reputation
Campaigns
AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
ASN · 52 IPs · 10628 events
Session Forensics
scanner ×4 unknown ×1
Sessions
5
Avg Depth Score
0.14
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
b893695067f94c8d2ed92025b192c636
SSH Client
\xfc\xf8\xec cLrۮ\x93\xf5\xc6|\xc9\xf9\xd3\xff\x9bC\xf1ON\xa25\xc0qʢ\xec#B \xaa\xf7\x83\xfa$\xdb'xIj\x84=W!̫,\xe1kTӻ́\xbd\x8e٥\xb8F4̨̩\xc0/\xc00\xc0+\xc0,\xc0 \x9ę̪3=\xc0SSH-1.5-ServerSSH-2.0-OpenSSH_7.4
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-03-25 08:05:48 :21 ftp FTP connection sin
2026-03-05 10:10:06 :22 ssh cowrie.session.closed sin
2026-03-05 10:10:06 :22 ssh cowrie.client.version sin
2026-03-05 10:10:06 :22 ssh cowrie.session.connect sin
2026-03-05 10:10:05 :22 ssh cowrie.session.closed sin
2026-03-05 10:10:05 :22 ssh cowrie.client.kex sin
2026-03-05 10:10:05 :22 ssh cowrie.client.version sin
2026-03-05 10:10:05 :22 ssh cowrie.session.connect sin
2026-03-05 10:10:05 :22 ssh cowrie.session.closed sin
2026-03-05 10:09:47 :22 ssh cowrie.session.connect sin
2026-03-05 10:09:46 :22 ssh cowrie.session.closed sin
2026-03-05 10:09:46 :22 ssh cowrie.client.version sin
2026-03-05 10:09:46 :22 ssh cowrie.session.connect sin