IntrusionLabs IntrusionLabs
← Back to feed

184.105.139.68

Threat Confidence
66%
Location
🇺🇸 US / Dallas
ASN
AS6939 · Hurricane Electric LLC
Cloud Provider
—
Total Events
10
Below average by volume
Agent Count
3
First / Last Seen
2026-03-13 09:34 — 2026-05-01 11:37
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
DShield Top Attackers
Reported 2026-05-01 14:00
dshield:top_attacker
Campaigns
Multi-Agent Scan SCAN Active medium
43 IPs 12890 events
2026-04-17 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
89 IPs 159381 events
2026-03-13 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 12851 events
2026-03-07 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
136 IPs 183434 events
2026-03-07 — ongoing · 136 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 161582 events
2026-03-07 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
88 IPs 162846 events
2026-03-02 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Session Forensics
scanner ×2 web_probe ×4
Sessions
6
Avg Depth Score
0.22
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH Client
{w\xd5\xdfJ7D\x9f\xbfTT-[\xdb?\x9aR\xa0\xf0\xc8\xd2@\\xb2\x99u\x96\x8f\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0{wg\xf82,\xc5\xc2\xde\xfc\xe8JG*6 ś*.٨S_\xead\xb5\xef\x9a\xe4\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0
Evidence Timeline
Scanner 8fadf35b367e newark_01 · 2026-05-01 11:37
15%
Loading events...
Scanner 79baf6a5be02 w4m_seattle_01 · 2026-05-01 09:14
15%
Loading events...
Web Probe bdcf05d139f05ab9 w4m_singapore_01 · 2026-03-18 09:40
25%
Loading events...
Web Probe 015e39a8cadbee0d w4m_singapore_01 · 2026-03-18 09:39
25%
Loading events...
Web Probe 0288e5a365bd01c0 w4m_singapore_01 · 2026-03-13 09:35
25%
Loading events...
Web Probe 44b337d6d9c3b9df w4m_singapore_01 · 2026-03-13 09:34
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-03-18 09:40:32 :80 http HTTP GET request opencanary sin
2026-03-18 09:39:52 :80 http HTTP GET request opencanary sin
2026-03-13 09:35:44 :80 http HTTP GET request opencanary sin
2026-03-13 09:34:50 :80 http HTTP GET request opencanary sin