IntrusionLabs IntrusionLabs
← Back to feed

118.193.59.194

Threat Confidence
28%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Cloud Provider
—
Total Events
13
Average by volume
Agent Count
1
First / Last Seen
2026-05-24 18:50 — 2026-08-25 01:25
Attack Types
ftp:bruteforce ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
CINS Army
Reported 2026-09-01 16:01
cins:bad_reputation
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×4 ftp_probe ×1
Sessions
5
Avg Depth Score
0.16
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
b893695067f94c8d2ed92025b192c636
SSH Client
\xfc\xf8C]j\x83\x8f@x\xba@0}\x9f\xc9ik\x98@\xb3\xd0ⰖV\xee\x9beFv\x81 \x81jH\xe7\x8bD\x83j<l\x9aGd\xf4\x91?\xa90\xd0\xe2H\xca\x84\xbdV\xe7#4̨̩\xc0/\xc00\xc0+\xc0,\xc0 \x9ę̪3=\xc0SSH-1.5-ServerSSH-2.0-OpenSSH_7.4
Evidence Timeline
Scanner fdf5e7f2c014 newark_01 · 2026-08-25 01:25
15%
Loading events...
Scanner 9db602dd8a52 newark_01 · 2026-08-25 01:25
15%
Loading events...
Scanner 6c2915aa6a4e newark_01 · 2026-08-25 01:24
15%
Loading events...
Scanner 21468ad36233 newark_01 · 2026-08-25 01:24
15%
Loading events...
FTP Probe 0b96a6d286a163b4 newark_01 · 2026-05-24 18:50
1 20%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}