IntrusionLabs IntrusionLabs
← Back to feed

154.72.196.195

Threat Confidence
25%
Location
🇺🇬 UG / Jinja
ASN
AS327724 · National Information Technology Authority Uganda
Cloud Provider
—
Total Events
40
Above average by volume
Agent Count
1
First / Last Seen
2026-08-23 21:23 — 2026-08-24 07:05
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
credential_probe ×6 opportunistic_bruter ×2
Sessions
8 (2 with login)
Avg Depth Score
0.27
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
124d5158f748aa073441ebaf2235d036194eaa9946a129f064c1a1eeee2ca21442a57924d29a0b00391be0bfd6b771705b2fa5488bbe66f1493def4fb47eb3ad8074470391b48db3dcda809875bf7cb680754cb7bcc36f3062637c87864f5a5b92c15af6c6c80260ba847579c05ee224f1af4c2f2ab20d381b9038980a401af5
SSH Client
SSH-2.0-Go
Evidence Timeline
Opportunistic Bruter 3ef82baea2ea newark_01 · 2026-08-24 07:05
1 50%
Loading events...
Opportunistic Bruter b4b8c93ec42c newark_01 · 2026-08-24 06:25
1 50%
Loading events...
Credential Probe 0355a77c1cd7 newark_01 · 2026-08-24 04:03
1 20%
Loading events...
Credential Probe 01b56675c8b4 newark_01 · 2026-08-24 03:23
1 20%
Loading events...
Credential Probe 536d8a5f1684 newark_01 · 2026-08-24 01:00
1 20%
Loading events...
Credential Probe 31f367d3612e newark_01 · 2026-08-24 00:21
1 20%
Loading events...
Credential Probe cd08f9d7814f newark_01 · 2026-08-23 22:02
1 20%
Loading events...
Credential Probe 11521f6fb921 newark_01 · 2026-08-23 21:23
1 20%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}