← Back to feed

157.15.40.56

Threat Confidence
35%
Location
🇮🇩 ID
ASN
AS139952 · PT Trisari Data Indonusa
Cloud Provider
Total Events
24
Average by volume
Agent Count
1
First / Last Seen
2026-07-03 01:10 — 2026-07-06 05:31
Attack Types
ftp:bruteforce ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
Credential Access
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
reconnaissance ×1
Sessions
1 (1 with login)
Avg Depth Score
0.6
Commands Executed
1
Files Downloaded
0
Notable Commands
  • whoami
Fingerprints
SSH-2.0-paramiko_5.0.0
Evidence Timeline
Reconnaissance 20bf04c81b96 newark_01 · 2026-07-03 01:10
1 1 60%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-06 05:31:35 :21 ftp FTP connection opencanary ewr
2026-07-03 01:10:59 :21 ftp FTP connection opencanary ewr