IntrusionLabs IntrusionLabs
← Back to feed

130.12.182.230

TAGGED SUSPICIOUS how we decide →
Threat Confidence
42%
Location
🇸🇮 SI
ASN
AS197769 · VPS Dedicated LLC
Cloud Provider
—
Total Events
31
Average by volume
Agent Count
2
First / Last Seen
2026-08-13 15:09 — 2026-08-15 13:21
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
Command and Control
T1090 T1572
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
72 IPs 281909 events
2026-07-08 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
100 IPs 603636 events
2026-07-08 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
8 IPs 1175 events
2026-07-08 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 343514 events
2026-07-08 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 277522 events
2026-05-27 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
9 IPs 4471 events
2026-04-10 — ongoing · 9 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
86 IPs 342841 events
2026-04-10 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
52 IPs 162810 events
2026-04-10 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 529424 events
2026-04-10 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
6 IPs 28926 events
2026-03-15 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 235538 events
2026-03-15 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
63 IPs 191447 events
2026-03-09 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
37 IPs 9899 events
2026-03-05 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
81 IPs 369727 events
2026-03-01 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
100 IPs 521420 events
2026-03-01 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
121 IPs 550620 events
2026-03-01 — ongoing · 121 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 24606 events
2026-02-28 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
102 IPs 445343 events
2026-02-26 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
proxy_abuser ×3 credential_probe ×2
Sessions
5 (3 with login)
Avg Depth Score
0.59
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
a591c4ddccc960a2da8099958270fc92
SSH Client
SSH-2.0-libssh_0.12.0
Evidence Timeline
Proxy Abuser aacd8ee9f736 newark_01 · 2026-08-15 13:21
1 85%
Loading events...
Credential Probe 13df3fdb2c9a w4m_singapore_01 · 2026-08-14 08:34
1 20%
Loading events...
Proxy Abuser f320c2cb7504 w4m_singapore_01 · 2026-08-14 01:20
1 85%
Loading events...
Proxy Abuser 50f517a36e22 w4m_singapore_01 · 2026-08-14 01:17
1 85%
Loading events...
Credential Probe 19bed1600436 w4m_singapore_01 · 2026-08-13 15:09
1 20%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}