IntrusionLabs IntrusionLabs
← Back to feed

160.119.76.17

TAGGED SUSPICIOUS how we decide →
Threat Confidence
62%
Location
🇸🇨 SC
ASN
AS49870 · Alsycon B.V.
Cloud Provider
—
Total Events
14
Below average by volume
Agent Count
3
First / Last Seen
2026-04-25 10:57 — 2026-05-28 15:00
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
81 IPs 190882 events
2026-05-11 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
40 IPs 20847 events
2026-04-25 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
112 IPs 196465 events
2026-04-25 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 160.119.76.0/24 SUBNET Active high 🇸🇨 SC
3 IPs 29 events
http:scanssh:bruteforce
2026-04-11 — ongoing · 3 IPs from the same /24 subnet (160.119.76.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
10 IPs 1510 events
2026-03-28 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
119 IPs 185379 events
2026-03-23 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
106 IPs 181775 events
2026-03-07 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan SCAN Active medium
100 IPs 196137 events
2026-03-02 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
72 IPs 50424 events
2026-03-02 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
67 IPs 75726 events
2026-03-02 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
scanner ×4 web_probe ×1 credential_probe ×1
Sessions
6
Avg Depth Score
0.18
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
0a07365cc01fa9fc82608ba4019af499
SSH Client
SSH-2.0-Go
Evidence Timeline
Scanner df65872e2f83 newark_01 · 2026-05-28 15:00
15%
Loading events...
Scanner 0383afb4a33f w4m_singapore_01 · 2026-05-23 08:55
15%
Loading events...
Web Probe 0d1ad6b7273e1bc8 w4m_seattle_01 · 2026-04-25 11:28
25%
Loading events...
Credential Probe 250708e16d74 w4m_seattle_01 · 2026-04-25 11:05
1 20%
Loading events...
Scanner cf1dc6d14373 w4m_seattle_01 · 2026-04-25 11:01
15%
Loading events...
Scanner 7223c535b14f w4m_seattle_01 · 2026-04-25 10:57
15%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-04-25 11:28:27 :80 http HTTP GET request opencanary sea