IntrusionLabs IntrusionLabs
← Back to feed

118.193.61.179

Threat Confidence
69%
Assessment
Port and service scanner
  • Active for 41 days, 2026-09-15 to 2026-10-27.
  • Part of a 393-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇯🇵 JP / Tokyo
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Cloud Provider
—
Total Events
62
Above average by volume
Agent Count
3
First / Last Seen
2026-09-15 23:40 — 2026-10-27 08:15
Attack Types
ssh:bruteforce ssh:connection telnet:bruteforce telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
CINS Army
Reported 2026-10-27 06:02
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
343 IPs 1081497 events
2026-10-26 — ongoing · 343 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
332 IPs 966096 events
2026-10-26 — ongoing · 332 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
342 IPs 1009990 events
2026-10-03 — ongoing · 342 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
393 IPs 1183350 events
2026-04-26 — ongoing · 393 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED ASN Active medium 🇭🇰 HK
91 IPs 52859 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-02-18 — ongoing · 91 IPs from the same network (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED, AS135377) were active during overlapping time periods. …
Session Forensics
scanner ×12 unknown ×2 credential_probe ×6
Sessions
20
Avg Depth Score
0.16
Commands Executed
0
Files Downloaded
0
Fingerprints
3 SSH client banners · 1 HASSH fingerprint
HASSH
b893695067f94c8d2ed92025b192c636
SSH Client
SSH-1.5-ServerSSH-2.0-OpenSSH_7.4\x16\x03\x01\x00\xfc\x01\x00\x00\xf8\x03\x03\xea\x03\xa3\xe7t\xa5\x06\x9d\x99b\xf6\xadI\xb7\xbdj\x89\xf9t9\x8b4\xcc\x05\x8f\xc8\x19\x8a\xab%PJ \xada\xc0Ub!\xe8\xf2\x84\x92\x00\x03)$\x08\xc1\xc9V1\xb1\xed\x12\xed\xdfL\x9a\xf5\xf2<\x17\xb0m\x004\xcc\xa8\xcc\xa9\xc0/\xc00\xc0+\xc0,\xc0\x09\x00\x9e\xcc\xa8\xcc\xaa\x003\x00=\x00\x16\xc0
Evidence Timeline
Scanner 84d530c6470c newark_01 · 2026-10-27 08:14
15%
Loading events...
Scanner a078268b2b6d newark_01 · 2026-10-27 08:14
15%
Loading events...
Credential Probe 202e140f9778 newark_01 · 2026-10-27 08:14
1 20%
Loading events...
Credential Probe 1ab174e8e025 newark_01 · 2026-10-27 08:13
2 25%
Loading events...
Unknown 557f728f7ff3 newark_01 · 2026-10-27 08:13
10%
Loading events...
Credential Probe cf69d0e8e8ad newark_01 · 2026-10-27 08:13
1 20%
Loading events...
Scanner fb3e422d9f26 newark_01 · 2026-10-27 08:12
15%
Loading events...
Scanner d72d92088db2 newark_01 · 2026-10-27 08:12
15%
Loading events...
Scanner 3c6666145bb7 greencloud_phx_01 · 2026-10-20 19:01
15%
Loading events...
Scanner 64c3a32e4ca2 greencloud_phx_01 · 2026-10-20 19:01
15%
Loading events...
Scanner ac7477655ad4 greencloud_phx_01 · 2026-10-20 19:01
15%
Loading events...
Scanner 60a2c3118bc8 greencloud_phx_01 · 2026-10-20 19:01
15%
Loading events...
Scanner 372e4c2ce77e w4m_seattle_01 · 2026-09-15 23:42
15%
Loading events...
Scanner 526b6442a006 w4m_seattle_01 · 2026-09-15 23:41
15%
Loading events...
Credential Probe 93ce3c89abda w4m_seattle_01 · 2026-09-15 23:41
1 20%
Loading events...
Credential Probe 7420ab23235d w4m_seattle_01 · 2026-09-15 23:41
2 25%
Loading events...
Unknown 2c4abf891a89 w4m_seattle_01 · 2026-09-15 23:40
10%
Loading events...
Credential Probe 8081834d0848 w4m_seattle_01 · 2026-09-15 23:40
1 20%
Loading events...
Scanner 7d23409d04cc w4m_seattle_01 · 2026-09-15 23:40
15%
Loading events...
Scanner e89a48b782cc w4m_seattle_01 · 2026-09-15 23:40
15%
Loading events...